Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/glance@26.0.0.0b2
purl pkg:pypi/glance@26.0.0.0b2
Next non-vulnerable version 29.0.0.0b1
Latest non-vulnerable version 31.1.0
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-h6rd-5p7q-s3gq
Aliases:
CVE-2024-32498
GHSA-r4v4-w9pv-6fph
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected.
29.0.0.0b1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-ks23-t978-h7c4 A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images. CVE-2022-4134
GHSA-5gp5-vxj6-4257
PYSEC-2023-270

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T23:03:42.187105+00:00 GitLab Importer Affected by VCID-h6rd-5p7q-s3gq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/glance/CVE-2024-32498.yml 38.4.0
2026-04-16T22:23:46.127086+00:00 GitLab Importer Fixing VCID-ks23-t978-h7c4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/glance/CVE-2022-4134.yml 38.4.0
2026-04-12T00:21:34.662103+00:00 GitLab Importer Affected by VCID-h6rd-5p7q-s3gq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/glance/CVE-2024-32498.yml 38.3.0
2026-04-11T23:41:56.819173+00:00 GitLab Importer Fixing VCID-ks23-t978-h7c4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/glance/CVE-2022-4134.yml 38.3.0
2026-04-03T00:29:08.258955+00:00 GitLab Importer Affected by VCID-h6rd-5p7q-s3gq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/glance/CVE-2024-32498.yml 38.1.0
2026-04-02T23:45:53.096325+00:00 GitLab Importer Fixing VCID-ks23-t978-h7c4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/glance/CVE-2022-4134.yml 38.1.0
2026-04-01T18:09:00.375457+00:00 GitLab Importer Fixing VCID-ks23-t978-h7c4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/glance/CVE-2022-4134.yml 38.0.0