Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/horizon@9.0.0
purl pkg:pypi/horizon@9.0.0
Tags Ghost
Next non-vulnerable version 15.3.2
Latest non-vulnerable version 20.2.0
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-t697-h44p-k3hq
Aliases:
CVE-2016-4428
GHSA-grm6-x6mr-q3cv
OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability Cross-site scripting (XSS) vulnerability in OpenStack Dashboard (Horizon) 8.0.1 and earlier and 9.0.0 through 9.0.1 allows remote authenticated users to inject arbitrary web script or HTML by injecting an AngularJS template in a dashboard form.
9.1.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T16:00:55.983495+00:00 GHSA Importer Affected by VCID-t697-h44p-k3hq https://github.com/advisories/GHSA-grm6-x6mr-q3cv 38.0.0
2026-04-01T12:50:10.546332+00:00 GitLab Importer Affected by VCID-t697-h44p-k3hq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/horizon/CVE-2016-4428.yml 38.0.0