Search for packages
| purl | pkg:pypi/nova@31.3.1 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 2.5 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-43hc-pwvx-pmfg
Aliases: CVE-2014-3708 |
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users … | There are no reported fixed by versions. |
|
GHSA-67rh-9p29-vrxr
Aliases: CVE-2015-7713 |
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 … | There are no reported fixed by versions. |
|
GHSA-j6xh-q826-55jw
Aliases: CVE-2013-4179 |
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute … | There are no reported fixed by versions. |
|
GHSA-x8xr-rm9r-7mvf
Aliases: CVE-2015-0259 |
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before … | There are no reported fixed by versions. |
|
GHSA-92hc-c226-32q7
Aliases: CVE-2014-3608 |
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows … | There are no reported fixed by versions. |
|
GHSA-5mj6-643f-2g85
Aliases: CVE-2013-2256 |
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 … | There are no reported fixed by versions. |
|
GHSA-xjmj-p278-4jp5
Aliases: CVE-2014-3517 |
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x … | There are no reported fixed by versions. |
|
GHSA-mfmj-gwg3-vhw7
Aliases: CVE-2015-3280 |
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and … | There are no reported fixed by versions. |
|
CVE-2015-3241
Aliases: GHSA-3vx7-xff6-h2vx |
OpenStack Nova instance migration process does not stop when instance is deleted OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and … | There are no reported fixed by versions. |
|
CVE-2013-2030
Aliases: GHSA-pxxv-rv32-2qgv |
OpenStack Nova uses insecure keystone middleware tmpdir by default keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure … | There are no reported fixed by versions. |
|
PYSEC-2026-883
Aliases: CVE-2015-0259 GHSA-x8xr-rm9r-7mvf |
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before … | There are no reported fixed by versions. |
|
PYSEC-2026-863
Aliases: CVE-2014-3708 GHSA-43hc-pwvx-pmfg |
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users … | There are no reported fixed by versions. |
|
PYSEC-2026-866
Aliases: CVE-2013-2256 GHSA-5mj6-643f-2g85 |
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 … | There are no reported fixed by versions. |
|
PYSEC-2026-867
Aliases: CVE-2015-7713 GHSA-67rh-9p29-vrxr |
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 … | There are no reported fixed by versions. |
|
PYSEC-2026-884
Aliases: CVE-2014-3517 GHSA-xjmj-p278-4jp5 |
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x … | There are no reported fixed by versions. |
|
PYSEC-2026-877
Aliases: CVE-2015-3280 GHSA-mfmj-gwg3-vhw7 |
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and … | There are no reported fixed by versions. |
|
PYSEC-2026-875
Aliases: CVE-2013-4179 GHSA-j6xh-q826-55jw |
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute … | There are no reported fixed by versions. |
|
PYSEC-2026-869
Aliases: CVE-2014-3608 GHSA-92hc-c226-32q7 |
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
PYSEC-2026-2686
|
OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints ## Affects - Nova: >=18.0.0 <31.3.1, >=32.0.0 … |
CVE-2026-46448
GHSA-mfg3-p6m3-gjgr |