Search for packages
| purl | pkg:pypi/nova@23.2.2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.7 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2012-41
Aliases: CVE-2012-5625 |
OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical … | There are no reported fixed by versions. |
|
PYSEC-2013-45
|
keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local … | There are no reported fixed by versions. |
|
PYSEC-2012-41
Aliases: CVE-2012-5625 |
OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical … | There are no reported fixed by versions. |
|
PYSEC-2013-45
Aliases: CVE-2013-2030 |
keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local … | There are no reported fixed by versions. |
|
GHSA-43hc-pwvx-pmfg
Aliases: CVE-2014-3708 |
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users … | There are no reported fixed by versions. |
|
GHSA-67rh-9p29-vrxr
Aliases: CVE-2015-7713 |
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 … | There are no reported fixed by versions. |
|
GHSA-j6xh-q826-55jw
Aliases: CVE-2013-4179 |
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute … | There are no reported fixed by versions. |
|
GHSA-x8xr-rm9r-7mvf
Aliases: CVE-2015-0259 |
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before … | There are no reported fixed by versions. |
|
GHSA-92hc-c226-32q7
Aliases: CVE-2014-3608 |
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows … | There are no reported fixed by versions. |
|
GHSA-5mj6-643f-2g85
Aliases: CVE-2013-2256 |
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 … | There are no reported fixed by versions. |
|
GHSA-xjmj-p278-4jp5
Aliases: CVE-2014-3517 |
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x … | There are no reported fixed by versions. |
|
GHSA-mfmj-gwg3-vhw7
Aliases: CVE-2015-3280 |
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and … | There are no reported fixed by versions. |
|
PYSEC-2012-21
Aliases: CVE-2012-3447 GHSA-xc4g-7vw8-924h |
virt/disk/api.py in OpenStack Compute (Nova) 2012.1.x before 2012.1.2 and Folsom before Folsom-3 allows remote authenticated users to overwrite arbitrary files … | There are no reported fixed by versions. |
|
PYSEC-2012-36
Aliases: CVE-2012-2101 GHSA-hq3f-9gf7-73r8 |
Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated … | There are no reported fixed by versions. |
|
PYSEC-2012-37
Aliases: CVE-2012-2654 GHSA-46r8-9cj7-pw6g |
The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not … | There are no reported fixed by versions. |
|
PYSEC-2012-38
Aliases: CVE-2012-3360 GHSA-m454-cm7h-rqhh |
Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when used over libvirt-based hypervisors, allows … | There are no reported fixed by versions. |
|
PYSEC-2012-39
Aliases: CVE-2012-3361 GHSA-cm54-3vvf-f5p8 |
virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) allows remote authenticated users to overwrite arbitrary files … | There are no reported fixed by versions. |
|
PYSEC-2012-40
Aliases: CVE-2012-3371 GHSA-xxgm-qpj5-4886 |
The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when DifferentHostFilter or SameHostFilter is enabled, allows remote … | There are no reported fixed by versions. |
|
PYSEC-2012-40
Aliases: CVE-2012-3371 GHSA-xxgm-qpj5-4886 |
The Nova scheduler in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when DifferentHostFilter or SameHostFilter is enabled, allows remote … | There are no reported fixed by versions. |
|
PYSEC-2012-38
Aliases: CVE-2012-3360 GHSA-m454-cm7h-rqhh |
Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when used over libvirt-based hypervisors, allows … | There are no reported fixed by versions. |
|
PYSEC-2012-21
Aliases: CVE-2012-3447 GHSA-xc4g-7vw8-924h |
virt/disk/api.py in OpenStack Compute (Nova) 2012.1.x before 2012.1.2 and Folsom before Folsom-3 allows remote authenticated users to overwrite arbitrary files … | There are no reported fixed by versions. |
|
PYSEC-2012-39
Aliases: CVE-2012-3361 GHSA-cm54-3vvf-f5p8 |
virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) allows remote authenticated users to overwrite arbitrary files … | There are no reported fixed by versions. |
|
PYSEC-2012-37
Aliases: CVE-2012-2654 GHSA-46r8-9cj7-pw6g |
The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not … | There are no reported fixed by versions. |
|
PYSEC-2012-36
Aliases: CVE-2012-2101 GHSA-hq3f-9gf7-73r8 |
Openstack Compute (Nova) Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated … | There are no reported fixed by versions. |
|
CVE-2015-3241
Aliases: GHSA-3vx7-xff6-h2vx |
OpenStack Nova instance migration process does not stop when instance is deleted OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and … | There are no reported fixed by versions. |
|
CVE-2013-2030
Aliases: GHSA-pxxv-rv32-2qgv |
OpenStack Nova uses insecure keystone middleware tmpdir by default keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure … | There are no reported fixed by versions. |
|
PYSEC-2026-883
Aliases: CVE-2015-0259 GHSA-x8xr-rm9r-7mvf |
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before … | There are no reported fixed by versions. |
|
PYSEC-2026-1709
Aliases: CVE-2024-40767 GHSA-rm86-h44c-2r2m |
OpenStack Nova vulnerable to unauthorized access to potentially sensitive data In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 … | There are no reported fixed by versions. |
|
PYSEC-2026-1708
Aliases: CVE-2024-32498 GHSA-r4v4-w9pv-6fph PYSEC-2026-2414 PYSEC-2026-2493 |
OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access An issue was discovered in OpenStack Cinder through 24.0.0, Glance … | There are no reported fixed by versions. |
|
PYSEC-2026-863
Aliases: CVE-2014-3708 GHSA-43hc-pwvx-pmfg |
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users … | There are no reported fixed by versions. |
|
PYSEC-2026-866
Aliases: CVE-2013-2256 GHSA-5mj6-643f-2g85 |
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 … | There are no reported fixed by versions. |
|
PYSEC-2026-868
Aliases: CVE-2022-47951 GHSA-7h75-hwxx-qpgc PYSEC-2026-2411 PYSEC-2026-2490 |
OpenStack Cinder, glance, and Nova vulnerable to Path Traversal An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before … | There are no reported fixed by versions. |
|
PYSEC-2026-867
Aliases: CVE-2015-7713 GHSA-67rh-9p29-vrxr |
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 … | There are no reported fixed by versions. |
|
PYSEC-2026-2685
Aliases: CVE-2026-24708 GHSA-m4f3-qp2w-gwh6 |
OpenStack Nova calls qemu-img without format restrictions for resize An issue was discovered in OpenStack Nova before 30.2.2, 31 before … | There are no reported fixed by versions. |
|
PYSEC-2026-884
Aliases: CVE-2014-3517 GHSA-xjmj-p278-4jp5 |
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x … | There are no reported fixed by versions. |
|
PYSEC-2026-877
Aliases: CVE-2015-3280 GHSA-mfmj-gwg3-vhw7 |
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and … | There are no reported fixed by versions. |
|
PYSEC-2026-875
Aliases: CVE-2013-4179 GHSA-j6xh-q826-55jw |
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute … | There are no reported fixed by versions. |
|
PYSEC-2026-869
Aliases: CVE-2014-3608 GHSA-92hc-c226-32q7 |
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows … | There are no reported fixed by versions. |
|
PYSEC-2026-2686
Aliases: CVE-2026-46448 GHSA-mfg3-p6m3-gjgr |
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints ## Affects - Nova: >=18.0.0 <31.3.1, >=32.0.0 … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-mfg3-p6m3-gjgr
Aliases: CVE-2026-46448 |
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints ## Affects - Nova: >=18.0.0 <31.3.1, >=32.0.0 … |
Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
PYSEC-2026-882
|
OpenStack Nova Changing vnic_type breaks compute service restart An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, … |
CVE-2022-37394
GHSA-v725-c588-h936 |