Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/ironic-python-agent@29.0.5
purl pkg:pypi/ironic-python-agent@29.0.5
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-gs5w-fe6s-wbat An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential forwarded is a time-limited Keystone token (which provides access to all OpenStack services Ironic is authorized for); or basic credentials configured for molds storage. The fixed versions are 26.1.6, 29.0.5, 32.0.1, and 35.0.1. CVE-2026-42997
GHSA-54w4-233h-x86g

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T07:51:06.626963+00:00 GithubOSV Importer Fixing VCID-gs5w-fe6s-wbat https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-54w4-233h-x86g/GHSA-54w4-233h-x86g.json 38.6.0