nova
Cloud computing fabric controller
Activity
- Latest release
- 1d ago
- Total releases
- 144
- Cadence
- ~14 days
- Last 12 months
- 16
Details
- License
- Apache-2.0
- First release
- Oct 08, 2018
| Version | Released | |
|---|---|---|
34.0.0.0rc1
pre
8 CVEs
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
34.0.0.0rc1
pre
Dependencies (63)
+ 55 more |
|
32.2.1
patch
8 CVEs
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
32.2.1
patch
Dependencies (80)
+ 72 more |
|
31.3.1
patch
8 CVEs
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
31.3.1
patch
Dependencies (80)
+ 72 more |
|
33.0.2
patch
8 CVEs
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
33.0.2
patch
Dependencies (63)
+ 55 more |
|
30.3.0
minor
9 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
30.3.0
minor
Dependencies (81)
+ 73 more |
|
31.3.0
minor
9 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
31.3.0
minor
Dependencies (80)
+ 72 more |
|
32.2.0
minor
9 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
32.2.0
minor
Dependencies (80)
+ 72 more |
|
33.0.1
patch
9 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
33.0.1
patch
Dependencies (63)
+ 55 more |
|
33.0.0
major
9 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
33.0.0
major
Dependencies (63)
+ 55 more |
|
33.0.0.0rc1
pre
8 CVEs
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
33.0.0.0rc1
pre
Dependencies (63)
+ 55 more |
|
30.2.1
patch
10 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
30.2.1
patch
Dependencies (81)
+ 73 more |
|
29.4.0
minor
10 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
29.4.0
minor
Dependencies (81)
+ 73 more |
|
32.1.0
minor
10 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
32.1.0
minor
Dependencies (80)
+ 72 more |
|
31.2.0
minor
10 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
31.2.0
minor
Dependencies (80)
+ 72 more |
|
30.2.0
minor
10 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
30.2.0
minor
Dependencies (81)
+ 73 more |
|
32.0.0
major
10 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
32.0.0
major
Dependencies (80)
+ 72 more |
|
32.0.0.0rc1
pre
9 CVEs
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
32.0.0.0rc1
pre
Dependencies (80)
+ 72 more |
|
29.3.0
minor
10 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
29.3.0
minor
Dependencies (81)
+ 73 more |
|
30.1.0
minor
10 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
30.1.0
minor
Dependencies (81)
+ 73 more |
|
31.1.0
minor
10 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
31.1.0
minor
Dependencies (80)
+ 72 more |
|
29.2.2
patch
10 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
29.2.2
patch
Dependencies (81)
+ 73 more |
|
31.0.1
patch
10 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
31.0.1
patch
Dependencies (80)
+ 72 more |
|
29.2.1
patch
10 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
29.2.1
patch
Dependencies (81)
+ 73 more |
|
28.3.1
patch
11 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-32498
PYSEC-2026-1708
GHSA-r4v4-w9pv-6fph
PYSEC-2026-2414
PYSEC-2026-2493
Jul 07, 2026
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
High
Network
Low
Low
None
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 103 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
28.3.1
patch
Dependencies (86)
+ 78 more |
|
31.0.0
major
10 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
31.0.0
major
Dependencies (80)
+ 72 more |
|
31.0.0.0rc1
pre
10 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
31.0.0.0rc1
pre
Dependencies (80)
+ 72 more |
|
27.5.1
patch
11 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-32498
PYSEC-2026-1708
GHSA-r4v4-w9pv-6fph
PYSEC-2026-2414
PYSEC-2026-2493
Jul 07, 2026
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
High
Network
Low
Low
None
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 103 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
27.5.1
patch
Dependencies (87)
+ 79 more |
|
30.0.0
major
10 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
30.0.0
major
Dependencies (81)
+ 73 more |
|
30.0.0.0rc1
pre
10 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
30.0.0.0rc1
pre
Dependencies (81)
+ 73 more |
|
27.5.0
minor
11 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-32498
PYSEC-2026-1708
GHSA-r4v4-w9pv-6fph
PYSEC-2026-2414
PYSEC-2026-2493
Jul 07, 2026
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
High
Network
Low
Low
None
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 103 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
27.5.0
minor
Dependencies (87)
+ 79 more |
|
28.3.0
minor
11 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-32498
PYSEC-2026-1708
GHSA-r4v4-w9pv-6fph
PYSEC-2026-2414
PYSEC-2026-2493
Jul 07, 2026
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
High
Network
Low
Low
None
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 103 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
28.3.0
minor
Dependencies (86)
+ 78 more |
|
29.2.0
minor
10 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
29.2.0
minor
Dependencies (81)
+ 73 more |
|
29.1.0
minor
11 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-40767
PYSEC-2026-1709
GHSA-rm86-h44c-2r2m
Jul 07, 2026
OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
Medium
Network
Low
Low
None
In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Nova deployments are affected. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 98 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
28.0.0
28.0.1
28.1.0
28.2.0
29.0.0
29.0.1
29.0.2
29.1.0
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
29.1.0
minor
Dependencies (81)
+ 73 more |
|
28.2.0
minor
12 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-40767
PYSEC-2026-1709
GHSA-rm86-h44c-2r2m
Jul 07, 2026
OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
Medium
Network
Low
Low
None
In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Nova deployments are affected. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 98 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
28.0.0
28.0.1
28.1.0
28.2.0
29.0.0
29.0.1
29.0.2
29.1.0
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2024-32498
PYSEC-2026-1708
GHSA-r4v4-w9pv-6fph
PYSEC-2026-2414
PYSEC-2026-2493
Jul 07, 2026
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
High
Network
Low
Low
None
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 103 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
28.2.0
minor
Dependencies (86)
+ 78 more |
|
27.4.0
minor
12 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-40767
PYSEC-2026-1709
GHSA-rm86-h44c-2r2m
Jul 07, 2026
OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
Medium
Network
Low
Low
None
In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Nova deployments are affected. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 98 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
28.0.0
28.0.1
28.1.0
28.2.0
29.0.0
29.0.1
29.0.2
29.1.0
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2024-32498
PYSEC-2026-1708
GHSA-r4v4-w9pv-6fph
PYSEC-2026-2414
PYSEC-2026-2493
Jul 07, 2026
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
High
Network
Low
Low
None
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 103 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
27.4.0
minor
Dependencies (87)
+ 79 more |
|
29.0.2
patch
12 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-40767
PYSEC-2026-1709
GHSA-rm86-h44c-2r2m
Jul 07, 2026
OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
Medium
Network
Low
Low
None
In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Nova deployments are affected. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 98 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
28.0.0
28.0.1
28.1.0
28.2.0
29.0.0
29.0.1
29.0.2
29.1.0
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2024-32498
PYSEC-2026-1708
GHSA-r4v4-w9pv-6fph
PYSEC-2026-2414
PYSEC-2026-2493
Jul 07, 2026
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
High
Network
Low
Low
None
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 103 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
29.0.2
patch
Dependencies (81)
+ 73 more |
|
28.1.0
minor
12 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-40767
PYSEC-2026-1709
GHSA-rm86-h44c-2r2m
Jul 07, 2026
OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
Medium
Network
Low
Low
None
In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Nova deployments are affected. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 98 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
28.0.0
28.0.1
28.1.0
28.2.0
29.0.0
29.0.1
29.0.2
29.1.0
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2024-32498
PYSEC-2026-1708
GHSA-r4v4-w9pv-6fph
PYSEC-2026-2414
PYSEC-2026-2493
Jul 07, 2026
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
High
Network
Low
Low
None
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 103 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
28.1.0
minor
Dependencies (86)
+ 78 more |
|
27.3.0
minor
12 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-40767
PYSEC-2026-1709
GHSA-rm86-h44c-2r2m
Jul 07, 2026
OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
Medium
Network
Low
Low
None
In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Nova deployments are affected. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 98 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
28.0.0
28.0.1
28.1.0
28.2.0
29.0.0
29.0.1
29.0.2
29.1.0
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2024-32498
PYSEC-2026-1708
GHSA-r4v4-w9pv-6fph
PYSEC-2026-2414
PYSEC-2026-2493
Jul 07, 2026
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
High
Network
Low
Low
None
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 103 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
27.3.0
minor
Dependencies (87)
+ 79 more |
|
26.3.0
minor
12 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-40767
PYSEC-2026-1709
GHSA-rm86-h44c-2r2m
Jul 07, 2026
OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
Medium
Network
Low
Low
None
In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Nova deployments are affected. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 98 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
28.0.0
28.0.1
28.1.0
28.2.0
29.0.0
29.0.1
29.0.2
29.1.0
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2024-32498
PYSEC-2026-1708
GHSA-r4v4-w9pv-6fph
PYSEC-2026-2414
PYSEC-2026-2493
Jul 07, 2026
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
High
Network
Low
Low
None
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 103 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
26.3.0
minor
Dependencies (87)
+ 79 more |
|
29.0.1
patch
12 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-40767
PYSEC-2026-1709
GHSA-rm86-h44c-2r2m
Jul 07, 2026
OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
Medium
Network
Low
Low
None
In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Nova deployments are affected. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 98 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
28.0.0
28.0.1
28.1.0
28.2.0
29.0.0
29.0.1
29.0.2
29.1.0
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2024-32498
PYSEC-2026-1708
GHSA-r4v4-w9pv-6fph
PYSEC-2026-2414
PYSEC-2026-2493
Jul 07, 2026
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
High
Network
Low
Low
None
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 103 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
29.0.1
patch
Dependencies (81)
+ 73 more |
|
29.0.0
major
12 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-40767
PYSEC-2026-1709
GHSA-rm86-h44c-2r2m
Jul 07, 2026
OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
Medium
Network
Low
Low
None
In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Nova deployments are affected. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 98 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
28.0.0
28.0.1
28.1.0
28.2.0
29.0.0
29.0.1
29.0.2
29.1.0
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2024-32498
PYSEC-2026-1708
GHSA-r4v4-w9pv-6fph
PYSEC-2026-2414
PYSEC-2026-2493
Jul 07, 2026
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
High
Network
Low
Low
None
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 103 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
29.0.0
major
Dependencies (81)
+ 73 more |
|
29.0.0.0rc1
pre
11 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-32498
PYSEC-2026-1708
GHSA-r4v4-w9pv-6fph
PYSEC-2026-2414
PYSEC-2026-2493
Jul 07, 2026
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
High
Network
Low
Low
None
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 103 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
29.0.0.0rc1
pre
Dependencies (81)
+ 73 more |
|
26.2.2
patch
12 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-40767
PYSEC-2026-1709
GHSA-rm86-h44c-2r2m
Jul 07, 2026
OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
Medium
Network
Low
Low
None
In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Nova deployments are affected. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 98 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
28.0.0
28.0.1
28.1.0
28.2.0
29.0.0
29.0.1
29.0.2
29.1.0
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2024-32498
PYSEC-2026-1708
GHSA-r4v4-w9pv-6fph
PYSEC-2026-2414
PYSEC-2026-2493
Jul 07, 2026
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
High
Network
Low
Low
None
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 103 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
26.2.2
patch
Dependencies (87)
+ 79 more |
|
26.2.1
patch
12 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-40767
PYSEC-2026-1709
GHSA-rm86-h44c-2r2m
Jul 07, 2026
OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
Medium
Network
Low
Low
None
In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Nova deployments are affected. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 98 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
28.0.0
28.0.1
28.1.0
28.2.0
29.0.0
29.0.1
29.0.2
29.1.0
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2024-32498
PYSEC-2026-1708
GHSA-r4v4-w9pv-6fph
PYSEC-2026-2414
PYSEC-2026-2493
Jul 07, 2026
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
High
Network
Low
Low
None
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 103 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
26.2.1
patch
Dependencies (87)
+ 79 more |
|
27.2.0
minor
12 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-40767
PYSEC-2026-1709
GHSA-rm86-h44c-2r2m
Jul 07, 2026
OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
Medium
Network
Low
Low
None
In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Nova deployments are affected. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 98 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
28.0.0
28.0.1
28.1.0
28.2.0
29.0.0
29.0.1
29.0.2
29.1.0
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2024-32498
PYSEC-2026-1708
GHSA-r4v4-w9pv-6fph
PYSEC-2026-2414
PYSEC-2026-2493
Jul 07, 2026
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
High
Network
Low
Low
None
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 103 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
27.2.0
minor
Dependencies (87)
+ 79 more |
|
25.3.0
minor
12 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-40767
PYSEC-2026-1709
GHSA-rm86-h44c-2r2m
Jul 07, 2026
OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
Medium
Network
Low
Low
None
In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Nova deployments are affected. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 98 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
28.0.0
28.0.1
28.1.0
28.2.0
29.0.0
29.0.1
29.0.2
29.1.0
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2024-32498
PYSEC-2026-1708
GHSA-r4v4-w9pv-6fph
PYSEC-2026-2414
PYSEC-2026-2493
Jul 07, 2026
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
High
Network
Low
Low
None
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 103 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
25.3.0
minor
Dependencies (90)
+ 82 more |
|
28.0.1
patch
12 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-40767
PYSEC-2026-1709
GHSA-rm86-h44c-2r2m
Jul 07, 2026
OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
Medium
Network
Low
Low
None
In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Nova deployments are affected. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 98 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
28.0.0
28.0.1
28.1.0
28.2.0
29.0.0
29.0.1
29.0.2
29.1.0
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2024-32498
PYSEC-2026-1708
GHSA-r4v4-w9pv-6fph
PYSEC-2026-2414
PYSEC-2026-2493
Jul 07, 2026
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
High
Network
Low
Low
None
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 103 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
28.0.1
patch
Dependencies (86)
+ 78 more |
|
28.0.0
major
12 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-40767
PYSEC-2026-1709
GHSA-rm86-h44c-2r2m
Jul 07, 2026
OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
Medium
Network
Low
Low
None
In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Nova deployments are affected. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 98 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
28.0.0
28.0.1
28.1.0
28.2.0
29.0.0
29.0.1
29.0.2
29.1.0
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2024-32498
PYSEC-2026-1708
GHSA-r4v4-w9pv-6fph
PYSEC-2026-2414
PYSEC-2026-2493
Jul 07, 2026
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
High
Network
Low
Low
None
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 103 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
28.0.0
major
Dependencies (86)
+ 78 more |
|
28.0.0.0rc1
pre
11 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-32498
PYSEC-2026-1708
GHSA-r4v4-w9pv-6fph
PYSEC-2026-2414
PYSEC-2026-2493
Jul 07, 2026
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
High
Network
Low
Low
None
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 103 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
28.0.0.0rc1
pre
Dependencies (86)
+ 78 more |
|
25.2.1
patch
12 CVEs
CVE-2026-46448
PYSEC-2026-2686
GHSA-mfg3-p6m3-gjgr
Jul 13, 2026
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
5.4
/ 10
Medium
Network
Low
Low
None
Unchanged
Low
None
Low
Affects
DescriptionErichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling constraint enforcement, including availability zone, host aggregate, and image trait restrictions. The resulting instance has no Placement allocation, which can lead to compute node resource exhaustion and cross-tenant data persistence on NVMe devices after instance deletion. Deployments running Nova 18.0.0 or later are affected. Patches
Credits
Affected versions
18.0.2
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
+ 115 more Show less
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
32.0.0
32.1.0
32.2.0
33.0.0
33.0.1
Fixed in
31.3.1
32.2.1
33.0.2
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-24708
PYSEC-2026-2685
GHSA-m4f3-qp2w-gwh6
Jul 13, 2026
OpenStack Nova calls qemu-img without format restrictions for resize
8.2
/ 10
High
Network
High
Low
None
Changed
None
High
High
An issue was discovered in OpenStack Nova before 30.2.2, 31 before 31.2.1, and 32 before 32.1.1. By writing a malicious QCOW header to a root or ephemeral disk and then triggering a resize, a user may convince Nova's Flat image backend to call qemu-img without a format restriction, resulting in an unsafe image resize operation that could destroy data on the host system. Only compute nodes using the Flat image backend (usually configured with use_cow_images=False) are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 122 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
32.0.0
32.0.0.0rc1
32.1.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-40767
PYSEC-2026-1709
GHSA-rm86-h44c-2r2m
Jul 07, 2026
OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
Medium
Network
Low
Low
None
In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Nova deployments are affected. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 98 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
28.0.0
28.0.1
28.1.0
28.2.0
29.0.0
29.0.1
29.0.2
29.1.0
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2024-32498
PYSEC-2026-1708
GHSA-r4v4-w9pv-6fph
PYSEC-2026-2414
PYSEC-2026-2493
Jul 07, 2026
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
High
Network
Low
Low
None
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 103 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2013-4179
PYSEC-2026-875
GHSA-j6xh-q826-55jw
Jul 06, 2026
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute (Nova) Grizzly 2013.1.3, Havana before havana-3, and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3517
PYSEC-2026-884
GHSA-xjmj-p278-4jp5
Jul 06, 2026
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.2.4
2014.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2013-2256
PYSEC-2026-866
GHSA-5mj6-643f-2g85
Jul 06, 2026
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to obtain sensitive information (flavor properties), boot arbitrary flavors, and possibly have other unspecified impacts by guessing the flavor id. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2013.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-7713
PYSEC-2026-867
GHSA-67rh-9p29-vrxr
Jul 06, 2026
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3708
PYSEC-2026-863
GHSA-43hc-pwvx-pmfg
Jul 06, 2026
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API request. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.1
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2014-3608
PYSEC-2026-869
GHSA-92hc-c226-32q7
Jul 06, 2026
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by putting the VM into the rescue state, suspending it, which puts into an ERROR state, and then deleting the image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2573. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.3
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-3280
PYSEC-2026-877
GHSA-mfmj-gwg3-vhw7
Jul 06, 2026
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in the resize state. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.2.4
2015.1.2
References Updated Jul 07, 2026 · Source: OSV.dev
CVE-2015-0259
PYSEC-2026-883
GHSA-x8xr-rm9r-7mvf
Jul 06, 2026
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage. Affected versions
15.1.5
16.1.6
16.1.7
16.1.8
17.0.10
17.0.11
17.0.12
17.0.13
17.0.7
17.0.8
17.0.9
18.0.2
+ 131 more Show less
18.0.3
18.1.0
18.2.0
18.2.1
18.2.2
18.2.3
18.3.0
19.0.0
19.0.0.0rc1
19.0.0.0rc2
19.0.1
19.0.2
19.0.3
19.1.0
19.2.0
19.3.0
19.3.1
19.3.2
20.0.0
20.0.0.0rc1
20.0.0.0rc2
20.0.1
20.1.0
20.1.1
20.2.0
20.3.0
20.4.0
20.4.1
20.5.0
20.6.0
20.6.1
21.0.0
21.0.0.0rc1
21.0.0.0rc2
21.1.0
21.1.1
21.1.2
21.2.0
21.2.1
21.2.2
21.2.3
21.2.4
22.0.0
22.0.0.0rc1
22.0.1
22.1.0
22.2.0
22.2.1
22.2.2
22.3.0
22.4.0
23.0.0
23.0.0.0rc1
23.0.0.0rc2
23.0.1
23.0.2
23.1.0
23.2.0
23.2.1
23.2.2
24.0.0
24.0.0.0rc1
24.0.0.0rc2
24.1.0
24.1.1
24.2.0
24.2.1
25.0.0
25.0.0.0rc1
25.0.1
25.1.0
25.1.1
25.2.0
25.2.1
25.3.0
26.0.0
26.0.0.0rc1
26.0.0.0rc2
26.1.0
26.1.1
26.2.0
26.2.1
26.2.2
26.3.0
27.0.0
27.0.0.0rc1
27.1.0
27.2.0
27.3.0
27.4.0
27.5.0
27.5.1
28.0.0
28.0.0.0rc1
28.0.1
28.1.0
28.2.0
28.3.0
28.3.1
29.0.0
29.0.0.0rc1
29.0.1
29.0.2
29.1.0
29.2.0
29.2.1
29.2.2
29.3.0
29.4.0
30.0.0
30.0.0.0rc1
30.1.0
30.2.0
30.2.1
30.3.0
31.0.0
31.0.0.0rc1
31.0.1
31.1.0
31.2.0
31.3.0
31.3.1
32.0.0
32.0.0.0rc1
32.1.0
32.2.0
32.2.1
33.0.0
33.0.0.0rc1
33.0.1
33.0.2
Fixed in
2014.1.4
2014.2.3
References Updated Jul 07, 2026 · Source: OSV.dev |
25.2.1
patch
Dependencies (90)
+ 82 more |