Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/mistral@6.0.0
purl pkg:pypi/mistral@6.0.0
Next non-vulnerable version 10.0.0
Latest non-vulnerable version 10.0.0
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-am12-sa1d-27ef
Aliases:
CVE-2018-16848
GHSA-443j-6p7g-6v4w
PYSEC-2020-240
A Denial of Service (DoS) condition is possible in OpenStack Mistral in versions up to and including 7.0.3. Submitting a specially crafted workflow definition YAML file containing nested anchors can lead to resource exhaustion culminating in a denial of service.
7.0.4
Affected by 1 other vulnerability.
10.0.0
Affected by 0 other vulnerabilities.
VCID-vyg9-hnp3-wye9
Aliases:
CVE-2018-16849
GHSA-fqw7-c6vr-q29m
PYSEC-2018-92
A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor running the action. Since std.ssh private_key_filename can take an absolute path, it can be used to assess whether or not a file exists on the executor's filesystem.
7.0.1
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T21:56:52.787535+00:00 GitLab Importer Affected by VCID-am12-sa1d-27ef https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/mistral/CVE-2018-16848.yml 38.4.0
2026-04-16T21:47:25.439267+00:00 GitLab Importer Affected by VCID-vyg9-hnp3-wye9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/mistral/CVE-2018-16849.yml 38.4.0
2026-04-11T23:12:16.326569+00:00 GitLab Importer Affected by VCID-am12-sa1d-27ef https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/mistral/CVE-2018-16848.yml 38.3.0
2026-04-11T23:03:15.470524+00:00 GitLab Importer Affected by VCID-vyg9-hnp3-wye9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/mistral/CVE-2018-16849.yml 38.3.0
2026-04-02T23:20:37.386190+00:00 GitLab Importer Affected by VCID-am12-sa1d-27ef https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/mistral/CVE-2018-16848.yml 38.1.0
2026-04-02T23:11:38.642888+00:00 GitLab Importer Affected by VCID-vyg9-hnp3-wye9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/mistral/CVE-2018-16849.yml 38.1.0
2026-04-01T17:41:15.968807+00:00 GitLab Importer Affected by VCID-am12-sa1d-27ef https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/mistral/CVE-2018-16848.yml 38.0.0
2026-04-01T17:31:31.621038+00:00 GitLab Importer Affected by VCID-vyg9-hnp3-wye9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/mistral/CVE-2018-16849.yml 38.0.0
2026-04-01T15:02:01.056671+00:00 PyPI Importer Affected by VCID-am12-sa1d-27ef https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.0.0
2026-04-01T15:00:31.803719+00:00 PyPI Importer Affected by VCID-vyg9-hnp3-wye9 https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.0.0
2026-04-01T12:42:31.253886+00:00 Pypa Importer Affected by VCID-am12-sa1d-27ef https://github.com/pypa/advisory-database/blob/main/vulns/mistral/PYSEC-2020-240.yaml 38.0.0
2026-04-01T12:41:52.486986+00:00 Pypa Importer Affected by VCID-vyg9-hnp3-wye9 https://github.com/pypa/advisory-database/blob/main/vulns/mistral/PYSEC-2018-92.yaml 38.0.0