Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/nova@34.0.0.0rc1
purl pkg:pypi/nova@34.0.0.0rc1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (8)
Advisory Summary Fixed in package version
GHSA-43hc-pwvx-pmfg
Aliases:
CVE-2014-3708
OpenStack Compute (Nova) Denial of Service vulnerability OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users … There are no reported fixed by versions.
GHSA-67rh-9p29-vrxr
Aliases:
CVE-2015-7713
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 … There are no reported fixed by versions.
GHSA-j6xh-q826-55jw
Aliases:
CVE-2013-4179
OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack The security group extension in OpenStack Compute … There are no reported fixed by versions.
GHSA-x8xr-rm9r-7mvf
Aliases:
CVE-2015-0259
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before … There are no reported fixed by versions.
GHSA-92hc-c226-32q7
Aliases:
CVE-2014-3608
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows … There are no reported fixed by versions.
GHSA-5mj6-643f-2g85
Aliases:
CVE-2013-2256
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-2 … There are no reported fixed by versions.
GHSA-xjmj-p278-4jp5
Aliases:
CVE-2014-3517
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability api/metadata/handler.py in OpenStack Compute (Nova) before 2013.2.4, 2014.x … There are no reported fixed by versions.
GHSA-mfmj-gwg3-vhw7
Aliases:
CVE-2015-3280
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service OpenStack Compute (nova) before 2014.2.4 (juno) and … There are no reported fixed by versions.
This package is not known to fix any advisories.