Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/nova@2014.0.0
purl pkg:pypi/nova@2014.0.0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-ex1j-py3q-93hv
Aliases:
CVE-2014-3517
GHSA-xjmj-p278-4jp5
Exposure of Sensitive Information to an Unauthorized Actor api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2, when proxying metadata requests through Neutron, makes it easier for remote attackers to guess instance ID signatures via a brute-force attack that relies on timing differences in responses to instance metadata requests.
2014.1.2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-04T14:30:38.251776+00:00 GHSA Importer Affected by VCID-ex1j-py3q-93hv https://github.com/advisories/GHSA-xjmj-p278-4jp5 38.1.0
2026-04-01T12:50:37.118301+00:00 GitLab Importer Affected by VCID-ex1j-py3q-93hv https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/nova/CVE-2014-3517.yml 38.0.0