Search for packages
| purl | pkg:pypi/glance@21.0.0.0rc2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.2 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2013-4428
|
Improper Access Control When the `download_image` policy is configured, does not properly restrict access to cached images, which allows remote … | There are no reported fixed by versions. |
|
GHSA-gvjg-r9fv-7qx9
Aliases: CVE-2015-5286 |
OpenStack Image Service (Glance) allows remote authenticated users to bypass storage quota, cause denial of service OpenStack Image Service (Glance) … | There are no reported fixed by versions. |
|
PYSEC-2012-29
Aliases: CVE-2012-4573 GHSA-6rrm-xxvh-7r87 |
The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected … | There are no reported fixed by versions. |
|
PYSEC-2012-30
Aliases: CVE-2012-5482 GHSA-vwr9-9f8v-vp5m |
The v2 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected … | There are no reported fixed by versions. |
|
PYSEC-2013-37
Aliases: CVE-2013-0212 GHSA-xv7j-2v4w-cjvh |
store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the … | There are no reported fixed by versions. |
|
PYSEC-2023-270
Aliases: CVE-2022-4134 GHSA-5gp5-vxj6-4257 |
A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the … | There are no reported fixed by versions. |
|
PYSEC-2012-30
Aliases: CVE-2012-5482 GHSA-vwr9-9f8v-vp5m |
The v2 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected … | There are no reported fixed by versions. |
|
PYSEC-2013-37
Aliases: CVE-2013-0212 GHSA-xv7j-2v4w-cjvh |
store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the … | There are no reported fixed by versions. |
|
PYSEC-2012-29
Aliases: CVE-2012-4573 GHSA-6rrm-xxvh-7r87 |
The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected … | There are no reported fixed by versions. |
|
PYSEC-2026-2492
Aliases: CVE-2026-34881 GHSA-mc26-q38v-83gv |
OpenStack Glance is affected by Server-Side Request Forgery (SSRF) OpenStack Glance versions < 29.1.1, >= 30.0.0 < 30.1.1, == 31.0.0 … |
Vulnerable Vulnerable Vulnerable |
|
PYSEC-2026-2490
Aliases: CVE-2022-47951 GHSA-7h75-hwxx-qpgc PYSEC-2026-2411 PYSEC-2026-868 |
OpenStack Cinder, glance, and Nova vulnerable to Path Traversal An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before … | There are no reported fixed by versions. |
|
PYSEC-2026-2493
Aliases: CVE-2024-32498 GHSA-r4v4-w9pv-6fph PYSEC-2026-1708 PYSEC-2026-2414 |
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access An issue was discovered in OpenStack Cinder through 24.0.0, Glance … | There are no reported fixed by versions. |
|
PYSEC-2026-812
Aliases: CVE-2015-5286 GHSA-gvjg-r9fv-7qx9 |
OpenStack Image Service (Glance) allows remote authenticated users to bypass storage quota, cause denial of service OpenStack Image Service (Glance) … | There are no reported fixed by versions. |