{"id":"CVE-2022-47951","aliases":["DEBIAN-CVE-2022-47951","DLA-3300-1","DLA-3301-1","DLA-3302-1","DSA-5336-1","DSA-5337-1","DSA-5338-1","EUVD-2023-0384","GHSA-7h75-hwxx-qpgc","PYSEC-2026-2411","PYSEC-2026-2490","PYSEC-2026-868","RHSA-2023:1015","RHSA-2023:1016","RHSA-2023:1017","RHSA-2023:1278","RHSA-2023:1279","RHSA-2023:1280","SUSE-SU-2023:0844-1","SUSE-SU-2023:1949-1","UBUNTU-CVE-2022-47951","USN-5835-1","USN-5835-2","USN-5835-3","USN-5835-4","USN-5835-5","USN-6882-2"],"status":"published","title":"OpenStack Cinder, glance, and Nova vulnerable to Path Traversal","description":"An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.","severity":{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01063,"percentile":0.64887,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-22"],"published":"2023-01-26T00:00:00Z","modified":"2026-11-03T06:03:02Z","fixes":[{"ecosystem":"PyPI","package":"cinder","fixed_in":["19.1.2","20.0.2"],"sources":["ghsa","osv"]},{"ecosystem":"PyPI","package":"glance","fixed_in":["23.0.1","24.1.1"],"sources":["ghsa","osv"]},{"ecosystem":"PyPI","package":"nova","fixed_in":["24.1.2","25.0.2"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"cinder","fixed_in":["2:21.0.0-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cinder","fixed_in":["2:21.0.0-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cinder","fixed_in":["2:21.0.0-3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"glance","fixed_in":["2:25.0.0-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"glance","fixed_in":["2:25.0.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"glance","fixed_in":["2:25.0.0-2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"nova","fixed_in":["2:26.0.0-6"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nova","fixed_in":["2:26.0.0-6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nova","fixed_in":["2:26.0.0-6"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"glance","fixed_in":["2:17.0.0-5+deb10u1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"cinder","fixed_in":["2:13.0.7-1+deb10u2"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"nova","fixed_in":["2:18.1.0-6+deb10u2"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"glance","fixed_in":["2:21.0.0-2+deb11u1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"nova","fixed_in":["2:22.0.1-2+deb11u1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"cinder","fixed_in":["2:17.0.1-1+deb11u1"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.0::el9","package":"openstack-nova","fixed_in":["1:23.2.2-0.20221209190753.7074ac0.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.0::el9","package":"openstack-nova-api","fixed_in":["1:23.2.2-0.20221209190753.7074ac0.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.0::el9","package":"openstack-nova-common","fixed_in":["1:23.2.2-0.20221209190753.7074ac0.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.0::el9","package":"openstack-nova-compute","fixed_in":["1:23.2.2-0.20221209190753.7074ac0.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.0::el9","package":"openstack-nova-conductor","fixed_in":["1:23.2.2-0.20221209190753.7074ac0.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.0::el9","package":"openstack-nova-migration","fixed_in":["1:23.2.2-0.20221209190753.7074ac0.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.0::el9","package":"openstack-nova-novncproxy","fixed_in":["1:23.2.2-0.20221209190753.7074ac0.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.0::el9","package":"openstack-nova-scheduler","fixed_in":["1:23.2.2-0.20221209190753.7074ac0.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.0::el9","package":"openstack-nova-serialproxy","fixed_in":["1:23.2.2-0.20221209190753.7074ac0.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.0::el9","package":"openstack-nova-spicehtml5proxy","fixed_in":["1:23.2.2-0.20221209190753.7074ac0.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.0::el9","package":"python3-nova","fixed_in":["1:23.2.2-0.20221209190753.7074ac0.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.0::el9","package":"openstack-cinder","fixed_in":["1:18.2.1-0.20230202190311.1776695.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.0::el9","package":"python3-cinder","fixed_in":["1:18.2.1-0.20230202190311.1776695.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.0::el9","package":"python3-cinder-common","fixed_in":["1:18.2.1-0.20230202190311.1776695.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.0::el9","package":"openstack-glance","fixed_in":["1:22.1.1-0.20220919210603.677c89c.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:17.0::el9","package":"python3-glance","fixed_in":["1:22.1.1-0.20220919210603.677c89c.el9ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova","fixed_in":["1:17.0.13-40.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-api","fixed_in":["1:17.0.13-40.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-cells","fixed_in":["1:17.0.13-40.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-common","fixed_in":["1:17.0.13-40.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-compute","fixed_in":["1:17.0.13-40.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-conductor","fixed_in":["1:17.0.13-40.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-console","fixed_in":["1:17.0.13-40.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-migration","fixed_in":["1:17.0.13-40.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-network","fixed_in":["1:17.0.13-40.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-novncproxy","fixed_in":["1:17.0.13-40.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-placement-api","fixed_in":["1:17.0.13-40.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-scheduler","fixed_in":["1:17.0.13-40.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-serialproxy","fixed_in":["1:17.0.13-40.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-spicehtml5proxy","fixed_in":["1:17.0.13-40.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"python-nova","fixed_in":["1:17.0.13-40.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"python-nova-tests","fixed_in":["1:17.0.13-40.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova","fixed_in":["1:20.4.1-1.20221005193231.1ee93b9.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-api","fixed_in":["1:20.4.1-1.20221005193231.1ee93b9.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-common","fixed_in":["1:20.4.1-1.20221005193231.1ee93b9.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-compute","fixed_in":["1:20.4.1-1.20221005193231.1ee93b9.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-conductor","fixed_in":["1:20.4.1-1.20221005193231.1ee93b9.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-console","fixed_in":["1:20.4.1-1.20221005193231.1ee93b9.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-migration","fixed_in":["1:20.4.1-1.20221005193231.1ee93b9.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-novncproxy","fixed_in":["1:20.4.1-1.20221005193231.1ee93b9.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-scheduler","fixed_in":["1:20.4.1-1.20221005193231.1ee93b9.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-serialproxy","fixed_in":["1:20.4.1-1.20221005193231.1ee93b9.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-spicehtml5proxy","fixed_in":["1:20.4.1-1.20221005193231.1ee93b9.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"python3-nova","fixed_in":["1:20.4.1-1.20221005193231.1ee93b9.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova","fixed_in":["1:20.6.2-2.20221005185231.6786e96.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-api","fixed_in":["1:20.6.2-2.20221005185231.6786e96.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-common","fixed_in":["1:20.6.2-2.20221005185231.6786e96.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-compute","fixed_in":["1:20.6.2-2.20221005185231.6786e96.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-conductor","fixed_in":["1:20.6.2-2.20221005185231.6786e96.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-console","fixed_in":["1:20.6.2-2.20221005185231.6786e96.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-migration","fixed_in":["1:20.6.2-2.20221005185231.6786e96.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-novncproxy","fixed_in":["1:20.6.2-2.20221005185231.6786e96.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-scheduler","fixed_in":["1:20.6.2-2.20221005185231.6786e96.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-serialproxy","fixed_in":["1:20.6.2-2.20221005185231.6786e96.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-spicehtml5proxy","fixed_in":["1:20.6.2-2.20221005185231.6786e96.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-nova","fixed_in":["1:20.6.2-2.20221005185231.6786e96.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-cinder","fixed_in":["1:12.0.10-27.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"python-cinder","fixed_in":["1:12.0.10-27.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-cinder","fixed_in":["1:15.4.0-1.20230206163350.58f0e73.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"python3-cinder","fixed_in":["1:15.4.0-1.20230206163350.58f0e73.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-cinder","fixed_in":["1:15.6.1-2.20221003154726.87578a0.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-cinder","fixed_in":["1:15.6.1-2.20221003154726.87578a0.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-glance","fixed_in":["1:16.0.1-13.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"python-glance","fixed_in":["1:16.0.1-13.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"python-glance-tests","fixed_in":["1:16.0.1-13.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-glance","fixed_in":["1:19.0.4-1.20230207203320.5bbd356.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.1::el8","package":"python3-glance","fixed_in":["1:19.0.4-1.20230207203320.5bbd356.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-glance","fixed_in":["1:19.0.5-2.20220113204850.b3de9da.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-glance","fixed_in":["1:19.0.5-2.20220113204850.b3de9da.el8ost"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-cinder","fixed_in":["13.0.10~dev24-3.37.2"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-glance","fixed_in":["17.0.1~dev30-3.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-neutron-gbp","fixed_in":["14.0.1~dev58-3.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-nova","fixed_in":["18.3.1~dev92-3.46.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"python-oslo.utils","fixed_in":["3.36.5-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-barbican","fixed_in":["7.0.1~dev24-3.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-cinder","fixed_in":["13.0.10~dev24-3.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-designate","fixed_in":["7.0.2~dev2-3.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-glance","fixed_in":["17.0.1~dev30-3.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-heat","fixed_in":["11.0.4~dev4-3.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-horizon","fixed_in":["14.1.1~dev11-4.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-ironic","fixed_in":["11.1.5~dev18-4.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-keystone","fixed_in":["14.2.1~dev9-3.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-magnum","fixed_in":["7.2.1~dev1-4.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-manila","fixed_in":["7.4.2~dev60-3.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-monasca","fixed_in":["2.7.1~dev10-3.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-monasca-ceilometer","fixed_in":["1.8.2~dev3-3.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-neutron","fixed_in":["13.0.8~dev209-6.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-nova","fixed_in":["18.3.1~dev92-3.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-octavia","fixed_in":["3.2.3~dev7-4.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-sahara","fixed_in":["9.0.2~dev15-3.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-swift","fixed_in":["2.19.2~dev48-2.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-cinder","fixed_in":["13.0.10~dev24-3.37.2"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-glance","fixed_in":["17.0.1~dev30-3.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-neutron-gbp","fixed_in":["14.0.1~dev58-3.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-nova","fixed_in":["18.3.1~dev92-3.46.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-oslo.utils","fixed_in":["3.36.5-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-cinder","fixed_in":["11.2.3~dev29-3.31.2"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-cinder-doc","fixed_in":["11.2.3~dev29-3.31.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-nova","fixed_in":["16.1.9~dev92-3.51.2"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-nova-doc","fixed_in":["16.1.9~dev92-3.51.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-oslo.utils","fixed_in":["3.28.4-3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-aodh","fixed_in":["5.1.1~dev7-12.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-barbican","fixed_in":["5.0.2~dev3-12.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-ceilometer","fixed_in":["9.0.8~dev7-12.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-cinder","fixed_in":["11.2.3~dev29-14.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-designate","fixed_in":["5.0.3~dev7-12.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-freezer","fixed_in":["5.0.0.0~xrc2~dev2-10.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-glance","fixed_in":["15.0.3~dev3-12.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-heat","fixed_in":["9.0.8~dev22-12.47.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-horizon-hpe","fixed_in":["12.0.5~dev6-14.50.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-ironic","fixed_in":["9.1.8~dev8-12.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-keystone","fixed_in":["12.0.4~dev11-11.47.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-magnum","fixed_in":["5.0.2_5.0.2_5.0.2~dev31-11.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-manila","fixed_in":["5.1.1~dev5-12.47.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-monasca","fixed_in":["2.2.2~dev1-11.47.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-monasca-ceilometer","fixed_in":["1.5.1_1.5.1_1.5.1~dev3-8.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-murano","fixed_in":["4.0.2~dev3-12.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-neutron","fixed_in":["11.0.9~dev69-13.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-nova","fixed_in":["16.1.9~dev92-11.46.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-octavia","fixed_in":["1.0.6~dev3-12.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-sahara","fixed_in":["7.0.5~dev4-11.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-swift","fixed_in":["2.15.2_2.15.2_2.15.2~dev32-11.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-trove","fixed_in":["8.0.2~dev2-11.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-cinder","fixed_in":["11.2.3~dev29-3.31.2"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-cinder-doc","fixed_in":["11.2.3~dev29-3.31.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-nova","fixed_in":["16.1.9~dev92-3.51.2"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-nova-doc","fixed_in":["16.1.9~dev92-3.51.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"python-oslo.utils","fixed_in":["3.28.4-3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-aodh","fixed_in":["5.1.1~dev7-12.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-barbican","fixed_in":["5.0.2~dev3-12.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-ceilometer","fixed_in":["9.0.8~dev7-12.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-cinder","fixed_in":["11.2.3~dev29-14.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-designate","fixed_in":["5.0.3~dev7-12.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-freezer","fixed_in":["5.0.0.0~xrc2~dev2-10.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-glance","fixed_in":["15.0.3~dev3-12.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-heat","fixed_in":["9.0.8~dev22-12.47.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-horizon","fixed_in":["12.0.5~dev6-14.50.2"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-ironic","fixed_in":["9.1.8~dev8-12.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-keystone","fixed_in":["12.0.4~dev11-11.47.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-magnum","fixed_in":["5.0.2_5.0.2_5.0.2~dev31-11.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-manila","fixed_in":["5.1.1~dev5-12.47.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-monasca","fixed_in":["2.2.2~dev1-11.47.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-monasca-ceilometer","fixed_in":["1.5.1_1.5.1_1.5.1~dev3-8.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-murano","fixed_in":["4.0.2~dev3-12.40.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-neutron","fixed_in":["11.0.9~dev69-13.48.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-nova","fixed_in":["16.1.9~dev92-11.46.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-octavia","fixed_in":["1.0.6~dev3-12.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-sahara","fixed_in":["7.0.5~dev4-11.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-swift","fixed_in":["2.15.2_2.15.2_2.15.2~dev32-11.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-trove","fixed_in":["8.0.2~dev2-11.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-cinder","fixed_in":["11.2.3~dev29-3.31.2"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-cinder-doc","fixed_in":["11.2.3~dev29-3.31.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-nova","fixed_in":["16.1.9~dev92-3.51.2"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-nova-doc","fixed_in":["16.1.9~dev92-3.51.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-oslo.utils","fixed_in":["3.28.4-3.9.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"cinder","fixed_in":["2:12.0.10-0ubuntu2.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"nova","fixed_in":["2:17.0.13-0ubuntu5.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"cinder","fixed_in":["2:16.4.2-0ubuntu2.1","2:16.4.2-0ubuntu2.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"glance","fixed_in":["2:20.2.0-0ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"nova","fixed_in":["2:21.2.4-0ubuntu2.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"cinder","fixed_in":["2:20.1.0-0ubuntu1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"glance","fixed_in":["2:24.1.0-0ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"nova","fixed_in":["3:25.1.0-0ubuntu1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.1.2"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20.0.0"},{"fixed":"20.0.2"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.1"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.0"},{"fixed":"24.1.1"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.2"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0"},{"fixed":"25.0.2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:21.0.0-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:21.0.0-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:21.0.0-3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:25.0.0-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:25.0.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:25.0.0-2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:26.0.0-6"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:26.0.0-6"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:26.0.0-6"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.0.0-5+deb10u1"}]}],"versions":["2:17.0.0-4"]},{"source":"osv","ecosystem":"Debian:10","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:13.0.7-1+deb10u2"}]}],"versions":["2:13.0.3-1"]},{"source":"osv","ecosystem":"Debian:10","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.1.0-6+deb10u2"}]}],"versions":["2:18.1.0-6","2:18.1.0-6+deb10u1"]},{"source":"osv","ecosystem":"Debian:11","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:21.0.0-2+deb11u1"}]}],"versions":["2:21.0.0-2"]},{"source":"osv","ecosystem":"Debian:11","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:22.0.1-2+deb11u1"}]}],"versions":["2:22.0.1-2"]},{"source":"osv","ecosystem":"Debian:11","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.0.1-1+deb11u1"}]}],"versions":["2:17.0.1-1"]},{"source":"osv","ecosystem":"PyPI","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.1.2"}]}],"versions":["10.0.8","11.2.0","11.2.1","11.2.2","12.0.10","12.0.4","12.0.5","12.0.6","12.0.7","12.0.8","12.0.9","13.0.1","13.0.2","13.0.3","13.0.4","13.0.5","13.0.6","13.0.7","13.0.8","13.0.9","14.0.0","14.0.0.0rc1","14.0.0.0rc2","14.0.1","14.0.2","14.0.3","14.0.4","14.1.0","14.2.0","14.2.1","14.3.0","14.3.1","15.0.0","15.0.0.0rc1","15.0.0.0rc2","15.0.1","15.1.0","15.2.0","15.3.0","15.4.0","15.4.1","15.5.0","15.6.0","16.0.0","16.0.0.0b1","16.0.0.0rc1","16.0.0.0rc2","16.0.0.0rc3","16.1.0","16.2.0","16.2.1","16.3.0","16.4.0","16.4.1","16.4.2","17.0.0","17.0.0.0rc1","17.0.0.0rc2","17.0.1","17.1.0","17.2.0","17.3.0","17.4.0","18.0.0","18.0.0.0b1","18.0.0.0rc1","18.0.0.0rc2","18.1.0","18.2.0","18.2.1","19.0.0","19.0.0.0b1","19.0.0.0rc1","19.0.0.0rc2","19.1.0","19.1.1"]},{"source":"osv","ecosystem":"PyPI","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20.0.0"},{"fixed":"20.0.2"}]}],"versions":["20.0.0","20.0.1"]},{"source":"osv","ecosystem":"PyPI","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.1"}]}],"versions":["15.0.2","17.0.1","18.0.0","18.0.0.0b1","18.0.0.0rc1","18.0.1","19.0.0","19.0.0.0b1","19.0.0.0rc1","19.0.0.0rc2","19.0.1","19.0.2","19.0.3","19.0.4","20.0.0","20.0.0.0b1","20.0.0.0b2","20.0.0.0b3","20.0.0.0rc1","20.0.0.0rc2","20.0.1","20.1.0","20.2.0","21.0.0","21.0.0.0b1","21.0.0.0b2","21.0.0.0rc1","21.0.0.0rc2","21.1.0","22.0.0","22.0.0.0b2","22.0.0.0b3","22.0.0.0rc1","22.1.0","22.1.1","23.0.0","23.0.0.0b2","23.0.0.0b3","23.0.0.0rc1","23.0.0.0rc2"]},{"source":"osv","ecosystem":"PyPI","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.0"},{"fixed":"24.1.1"}]}],"versions":["24.0.0","24.1.0"]},{"source":"osv","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.2"}]}],"versions":["15.1.5","16.1.6","16.1.7","16.1.8","17.0.10","17.0.11","17.0.12","17.0.13","17.0.7","17.0.8","17.0.9","18.0.2","18.0.3","18.1.0","18.2.0","18.2.1","18.2.2","18.2.3","18.3.0","19.0.0","19.0.0.0rc1","19.0.0.0rc2","19.0.1","19.0.2","19.0.3","19.1.0","19.2.0","19.3.0","19.3.1","19.3.2","20.0.0","20.0.0.0rc1","20.0.0.0rc2","20.0.1","20.1.0","20.1.1","20.2.0","20.3.0","20.4.0","20.4.1","20.5.0","20.6.0","20.6.1","21.0.0","21.0.0.0rc1","21.0.0.0rc2","21.1.0","21.1.1","21.1.2","21.2.0","21.2.1","21.2.2","21.2.3","21.2.4","22.0.0","22.0.0.0rc1","22.0.1","22.1.0","22.2.0","22.2.1","22.2.2","22.3.0","22.4.0","23.0.0","23.0.0.0rc1","23.0.0.0rc2","23.0.1","23.0.2","23.1.0","23.2.0","23.2.1","23.2.2","24.0.0","24.0.0.0rc1","24.0.0.0rc2","24.1.0","24.1.1"]},{"source":"osv","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0"},{"fixed":"25.0.2"}]}],"versions":["25.0.0","25.0.1"]},{"source":"osv","ecosystem":"PyPI","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.1.2"},{"introduced":"20.0.0"},{"fixed":"20.0.2"}]}],"versions":["10.0.8","11.2.0","11.2.1","11.2.2","12.0.10","12.0.4","12.0.5","12.0.6","12.0.7","12.0.8","12.0.9","13.0.1","13.0.2","13.0.3","13.0.4","13.0.5","13.0.6","13.0.7","13.0.8","13.0.9","14.0.0","14.0.0.0rc1","14.0.0.0rc2","14.0.1","14.0.2","14.0.3","14.0.4","14.1.0","14.2.0","14.2.1","14.3.0","14.3.1","15.0.0","15.0.0.0rc1","15.0.0.0rc2","15.0.1","15.1.0","15.2.0","15.3.0","15.4.0","15.4.1","15.5.0","15.6.0","16.0.0","16.0.0.0b1","16.0.0.0rc1","16.0.0.0rc2","16.0.0.0rc3","16.1.0","16.2.0","16.2.1","16.3.0","16.4.0","16.4.1","16.4.2","17.0.0","17.0.0.0rc1","17.0.0.0rc2","17.0.1","17.1.0","17.2.0","17.3.0","17.4.0","18.0.0","18.0.0.0b1","18.0.0.0rc1","18.0.0.0rc2","18.1.0","18.2.0","18.2.1","19.0.0","19.0.0.0b1","19.0.0.0rc1","19.0.0.0rc2","19.1.0","19.1.1","20.0.0","20.0.1"]},{"source":"osv","ecosystem":"PyPI","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.1"},{"introduced":"24.0.0"},{"fixed":"24.1.1"}]}],"versions":["15.0.2","17.0.1","18.0.0","18.0.0.0b1","18.0.0.0rc1","18.0.1","19.0.0","19.0.0.0b1","19.0.0.0rc1","19.0.0.0rc2","19.0.1","19.0.2","19.0.3","19.0.4","20.0.0","20.0.0.0b1","20.0.0.0b2","20.0.0.0b3","20.0.0.0rc1","20.0.0.0rc2","20.0.1","20.1.0","20.2.0","21.0.0","21.0.0.0b1","21.0.0.0b2","21.0.0.0rc1","21.0.0.0rc2","21.1.0","22.0.0","22.0.0.0b2","22.0.0.0b3","22.0.0.0rc1","22.1.0","22.1.1","23.0.0","23.0.0.0b2","23.0.0.0b3","23.0.0.0rc1","23.0.0.0rc2","24.0.0","24.1.0"]},{"source":"osv","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.1.2"},{"introduced":"25.0.0"},{"fixed":"25.0.2"}]}],"versions":["15.1.5","16.1.6","16.1.7","16.1.8","17.0.10","17.0.11","17.0.12","17.0.13","17.0.7","17.0.8","17.0.9","18.0.2","18.0.3","18.1.0","18.2.0","18.2.1","18.2.2","18.2.3","18.3.0","19.0.0","19.0.0.0rc1","19.0.0.0rc2","19.0.1","19.0.2","19.0.3","19.1.0","19.2.0","19.3.0","19.3.1","19.3.2","20.0.0","20.0.0.0rc1","20.0.0.0rc2","20.0.1","20.1.0","20.1.1","20.2.0","20.3.0","20.4.0","20.4.1","20.5.0","20.6.0","20.6.1","21.0.0","21.0.0.0rc1","21.0.0.0rc2","21.1.0","21.1.1","21.1.2","21.2.0","21.2.1","21.2.2","21.2.3","21.2.4","22.0.0","22.0.0.0rc1","22.0.1","22.1.0","22.2.0","22.2.1","22.2.2","22.3.0","22.4.0","23.0.0","23.0.0.0rc1","23.0.0.0rc2","23.0.1","23.0.2","23.1.0","23.2.0","23.2.1","23.2.2","24.0.0","24.0.0.0rc1","24.0.0.0rc2","24.1.0","24.1.1","25.0.0","25.0.1"]},{"source":"osv","ecosystem":"Red Hat:openstack:17.0::el9","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.2-0.20221209190753.7074ac0.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.0::el9","package":"openstack-nova-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.2-0.20221209190753.7074ac0.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.0::el9","package":"openstack-nova-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.2-0.20221209190753.7074ac0.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.0::el9","package":"openstack-nova-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.2-0.20221209190753.7074ac0.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.0::el9","package":"openstack-nova-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.2-0.20221209190753.7074ac0.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.0::el9","package":"openstack-nova-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.2-0.20221209190753.7074ac0.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.0::el9","package":"openstack-nova-novncproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.2-0.20221209190753.7074ac0.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.0::el9","package":"openstack-nova-scheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.2-0.20221209190753.7074ac0.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.0::el9","package":"openstack-nova-serialproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.2-0.20221209190753.7074ac0.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.0::el9","package":"openstack-nova-spicehtml5proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.2-0.20221209190753.7074ac0.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.0::el9","package":"python3-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:23.2.2-0.20221209190753.7074ac0.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.0::el9","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.2.1-0.20230202190311.1776695.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.0::el9","package":"python3-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.2.1-0.20230202190311.1776695.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.0::el9","package":"python3-cinder-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:18.2.1-0.20230202190311.1776695.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.0::el9","package":"openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:22.1.1-0.20220919210603.677c89c.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:17.0::el9","package":"python3-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:22.1.1-0.20220919210603.677c89c.el9ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.13-40.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.13-40.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-cells","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.13-40.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.13-40.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.13-40.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.13-40.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.13-40.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.13-40.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.13-40.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-novncproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.13-40.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-placement-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.13-40.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-scheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.13-40.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-serialproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.13-40.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-nova-spicehtml5proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.13-40.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"python-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.13-40.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"python-nova-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.13-40.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4.1-1.20221005193231.1ee93b9.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4.1-1.20221005193231.1ee93b9.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4.1-1.20221005193231.1ee93b9.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4.1-1.20221005193231.1ee93b9.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4.1-1.20221005193231.1ee93b9.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4.1-1.20221005193231.1ee93b9.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4.1-1.20221005193231.1ee93b9.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-novncproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4.1-1.20221005193231.1ee93b9.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-scheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4.1-1.20221005193231.1ee93b9.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-serialproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4.1-1.20221005193231.1ee93b9.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-nova-spicehtml5proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4.1-1.20221005193231.1ee93b9.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"python3-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.4.1-1.20221005193231.1ee93b9.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20221005185231.6786e96.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20221005185231.6786e96.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20221005185231.6786e96.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20221005185231.6786e96.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20221005185231.6786e96.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20221005185231.6786e96.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20221005185231.6786e96.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-novncproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20221005185231.6786e96.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-scheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20221005185231.6786e96.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-serialproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20221005185231.6786e96.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-nova-spicehtml5proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20221005185231.6786e96.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:20.6.2-2.20221005185231.6786e96.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:12.0.10-27.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"python-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:12.0.10-27.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.4.0-1.20230206163350.58f0e73.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"python3-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.4.0-1.20230206163350.58f0e73.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.6.1-2.20221003154726.87578a0.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:15.6.1-2.20221003154726.87578a0.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.0.1-13.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"python-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.0.1-13.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"python-glance-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.0.1-13.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:19.0.4-1.20230207203320.5bbd356.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.1::el8","package":"python3-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:19.0.4-1.20230207203320.5bbd356.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:19.0.5-2.20220113204850.b3de9da.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:16.2::el8","package":"python3-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:19.0.5-2.20220113204850.b3de9da.el8ost"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.10~dev24-3.37.2"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.1~dev30-3.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-neutron-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.0.1~dev58-3.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3.1~dev92-3.46.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-oslo.utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.36.5-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.1~dev24-3.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.10~dev24-3.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.2~dev2-3.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.1~dev30-3.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.4~dev4-3.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-horizon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1.1~dev11-4.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1.5~dev18-4.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.1~dev9-3.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-magnum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.1~dev1-4.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.2~dev60-3.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-monasca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1~dev10-3.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-monasca-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2~dev3-3.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.8~dev209-6.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3.1~dev92-3.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3~dev7-4.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.2~dev15-3.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.2~dev48-2.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.10~dev24-3.37.2"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.1~dev30-3.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-neutron-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.0.1~dev58-3.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.3.1~dev92-3.46.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-oslo.utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.36.5-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev29-3.31.2"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-cinder-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev29-3.31.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev92-3.51.2"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev92-3.51.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-oslo.utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.4-3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-aodh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev7-12.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2~dev3-12.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev7-12.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev29-14.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.3~dev7-12.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-freezer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0.0~xrc2~dev2-10.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.0.3~dev3-12.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev22-12.47.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-horizon-hpe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.5~dev6-14.50.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8~dev8-12.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4~dev11-11.47.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-magnum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2_5.0.2_5.0.2~dev31-11.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev5-12.47.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-monasca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2~dev1-11.47.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-monasca-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1_1.5.1_1.5.1~dev3-8.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-murano","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2~dev3-12.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev69-13.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev92-11.46.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6~dev3-12.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.5~dev4-11.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.2_2.15.2_2.15.2~dev32-11.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2~dev2-11.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev29-3.31.2"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-cinder-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev29-3.31.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev92-3.51.2"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev92-3.51.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-oslo.utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.4-3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-aodh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev7-12.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2~dev3-12.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev7-12.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev29-14.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.3~dev7-12.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-freezer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0.0~xrc2~dev2-10.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.0.3~dev3-12.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev22-12.47.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-horizon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.5~dev6-14.50.2"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8~dev8-12.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4~dev11-11.47.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-magnum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2_5.0.2_5.0.2~dev31-11.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev5-12.47.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-monasca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2~dev1-11.47.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-monasca-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1_1.5.1_1.5.1~dev3-8.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-murano","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2~dev3-12.40.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev69-13.48.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev92-11.46.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6~dev3-12.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.5~dev4-11.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.2_2.15.2_2.15.2~dev32-11.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2~dev2-11.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev29-3.31.2"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-cinder-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev29-3.31.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev92-3.51.2"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev92-3.51.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-oslo.utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.4-3.9.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:7.0.0-0ubuntu1","2:8.0.0~b1-0ubuntu1","2:8.0.0~b2-0ubuntu2","2:8.0.0~b3-0ubuntu2","2:8.0.0~rc1-0ubuntu2","2:8.0.0-0ubuntu1","2:8.1.0-0ubuntu1","2:8.1.1-0ubuntu1","2:8.1.1-0ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:12.0.0-0ubuntu2","2:13.0.0~b1-0ubuntu1","2:13.0.0~b2-0ubuntu1","2:13.0.0~b3-0ubuntu1","2:13.0.0~rc1-0ubuntu1","2:13.0.0~rc3-0ubuntu1","2:13.0.0-0ubuntu1","2:13.0.0-0ubuntu2","2:13.0.0-0ubuntu5","2:13.1.0-0ubuntu1","2:13.1.1-0ubuntu1","2:13.1.1-0ubuntu1.1","2:13.1.2-0ubuntu2","2:13.1.3-0ubuntu1","2:13.1.3-0ubuntu2","2:13.1.4-0ubuntu1","2:13.1.4-0ubuntu2","2:13.1.4-0ubuntu3","2:13.1.4-0ubuntu4.1","2:13.1.4-0ubuntu4.2","2:13.1.4-0ubuntu4.3","2:13.1.4-0ubuntu4.4","2:13.1.4-0ubuntu4.5","2:13.1.4-0ubuntu4.5+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.0.10-0ubuntu2.2"}]}],"versions":["2:11.0.0-0ubuntu2","2:11.0.0-0ubuntu3","2:12.0.0~b1-0ubuntu1","2:12.0.0~b2-0ubuntu2","2:12.0.0~rc1-0ubuntu1","2:12.0.0~rc2-0ubuntu1","2:12.0.0~rc2-0ubuntu2","2:12.0.0-0ubuntu1","2:12.0.1-0ubuntu1","2:12.0.3-0ubuntu1","2:12.0.4-0ubuntu1","2:12.0.5-0ubuntu1","2:12.0.7-0ubuntu2","2:12.0.9-0ubuntu1","2:12.0.9-0ubuntu1.2","2:12.0.10-0ubuntu1","2:12.0.10-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.0.13-0ubuntu5.2"}]}],"versions":["2:16.0.1-0ubuntu1","2:16.0.1-0ubuntu2","2:17.0.0~b1-0ubuntu1","2:17.0.0~b2-0ubuntu2","2:17.0.0~b3-0ubuntu3","2:17.0.0~b3-0ubuntu4","2:17.0.0~rc1-0ubuntu1","2:17.0.0~rc2-0ubuntu1","2:17.0.0~rc3-0ubuntu1","2:17.0.0-0ubuntu1","2:17.0.1-0ubuntu1","2:17.0.3-0ubuntu1","2:17.0.4-0ubuntu1","2:17.0.5-0ubuntu1","2:17.0.5-0ubuntu2","2:17.0.6-0ubuntu1","2:17.0.7-0ubuntu1","2:17.0.7-0ubuntu2","2:17.0.9-0ubuntu1","2:17.0.9-0ubuntu3","2:17.0.10-0ubuntu2","2:17.0.10-0ubuntu2.1","2:17.0.11-0ubuntu1","2:17.0.12-0ubuntu1","2:17.0.13-0ubuntu1","2:17.0.13-0ubuntu2","2:17.0.13-0ubuntu3","2:17.0.13-0ubuntu4","2:17.0.13-0ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.4.2-0ubuntu2.1"}]}],"versions":["2:15.0.0-0ubuntu1","2:16.0.0~b2~git2020020407.819b4a0fc-0ubuntu1","2:16.0.0~b3~git2020032414.a0c0a9e23-0ubuntu1","2:16.0.0~b3~git2020041012.eb915e2db-0ubuntu1","2:16.0.0-0ubuntu0.20.04.1","2:16.1.0-0ubuntu1","2:16.2.0-0ubuntu1","2:16.2.1-0ubuntu1","2:16.2.1-0ubuntu2","2:16.3.0-0ubuntu1","2:16.4.0-0ubuntu1","2:16.4.1-0ubuntu1","2:16.4.2-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.2.0-0ubuntu1.1"}]}],"versions":["2:19.0.0-0ubuntu1","2:20.0.0~b1~git2019121610.0c6dd98d-0ubuntu1","2:20.0.0~b2~git2020020509.8649fdc2-0ubuntu1","2:20.0.0~b3~git2020032414.30ece7aa-0ubuntu2","2:20.0.0~b3~git2020041012.d5a0ce18-0ubuntu1","2:20.0.0-0ubuntu0.20.04.1","2:20.0.1-0ubuntu1","2:20.1.0-0ubuntu1","2:20.2.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:21.2.4-0ubuntu2.1"}]}],"versions":["2:20.0.0-0ubuntu1","2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1","2:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu2","2:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu4","2:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu5","2:21.0.0~b3~git2020041013.57ff308d6d-0ubuntu2","2:21.0.0-0ubuntu0.20.04.1","2:21.0.0-0ubuntu0.20.04.2","2:21.1.0-0ubuntu1","2:21.1.1-0ubuntu2","2:21.1.2-0ubuntu1","2:21.2.0-0ubuntu1","2:21.2.1-0ubuntu1","2:21.2.2-0ubuntu1","2:21.2.3-0ubuntu1","2:21.2.4-0ubuntu1","2:21.2.4-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-0ubuntu1"}]}],"versions":["2:19.0.0-0ubuntu2","2:19.0.0+git2022030310.b49fb59a6-0ubuntu1","2:19.0.0+git2022030310.b49fb59a6-0ubuntu2","2:20.0.0-0ubuntu1","2:20.0.1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:24.1.0-0ubuntu1.1"}]}],"versions":["2:23.0.0-0ubuntu1","2:23.0.0+git2021120811.4ee7799aa-0ubuntu1","2:23.0.0+git2022011216.502fa0ffc-0ubuntu1","2:24.0.0~rc1+git2022030311.d4119be05-0ubuntu1","2:24.0.0-0ubuntu1","2:24.1.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:25.1.0-0ubuntu1"}]}],"versions":["3:24.0.0-0ubuntu1","3:24.0.0+git2022030310.3f274c65cc-0ubuntu2","3:25.0.0-0ubuntu1","3:25.0.0-0ubuntu1.1","3:25.0.1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.4.2-0ubuntu2.1"}]}],"versions":["2:15.0.0-0ubuntu1","2:16.0.0~b2~git2020020407.819b4a0fc-0ubuntu1","2:16.0.0~b3~git2020032414.a0c0a9e23-0ubuntu1","2:16.0.0~b3~git2020041012.eb915e2db-0ubuntu1","2:16.0.0-0ubuntu0.20.04.1","2:16.1.0-0ubuntu1","2:16.2.0-0ubuntu1","2:16.2.1-0ubuntu1","2:16.2.1-0ubuntu2","2:16.3.0-0ubuntu1","2:16.4.0-0ubuntu1","2:16.4.1-0ubuntu1","2:16.4.2-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.1.0-0ubuntu1"}]}],"versions":["2:19.0.0-0ubuntu2","2:19.0.0+git2022030310.b49fb59a6-0ubuntu1","2:19.0.0+git2022030310.b49fb59a6-0ubuntu2","2:20.0.0-0ubuntu1","2:20.0.1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.2.0-0ubuntu1.1"}]}],"versions":["2:19.0.0-0ubuntu1","2:20.0.0~b1~git2019121610.0c6dd98d-0ubuntu1","2:20.0.0~b2~git2020020509.8649fdc2-0ubuntu1","2:20.0.0~b3~git2020032414.30ece7aa-0ubuntu2","2:20.0.0~b3~git2020041012.d5a0ce18-0ubuntu1","2:20.0.0-0ubuntu0.20.04.1","2:20.0.1-0ubuntu1","2:20.1.0-0ubuntu1","2:20.2.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:24.1.0-0ubuntu1.1"}]}],"versions":["2:23.0.0-0ubuntu1","2:23.0.0+git2021120811.4ee7799aa-0ubuntu1","2:23.0.0+git2022011216.502fa0ffc-0ubuntu1","2:24.0.0~rc1+git2022030311.d4119be05-0ubuntu1","2:24.0.0-0ubuntu1","2:24.1.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:21.2.4-0ubuntu2.1"}]}],"versions":["2:20.0.0-0ubuntu1","2:21.0.0~b1~git2019120415.45fb747c98-0ubuntu1","2:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu2","2:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu4","2:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu5","2:21.0.0~b3~git2020041013.57ff308d6d-0ubuntu2","2:21.0.0-0ubuntu0.20.04.1","2:21.0.0-0ubuntu0.20.04.2","2:21.1.0-0ubuntu1","2:21.1.1-0ubuntu2","2:21.1.2-0ubuntu1","2:21.2.0-0ubuntu1","2:21.2.1-0ubuntu1","2:21.2.2-0ubuntu1","2:21.2.3-0ubuntu1","2:21.2.4-0ubuntu1","2:21.2.4-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:25.1.0-0ubuntu1"}]}],"versions":["3:24.0.0-0ubuntu1","3:24.0.0+git2022030310.3f274c65cc-0ubuntu2","3:25.0.0-0ubuntu1","3:25.0.0-0ubuntu1.1","3:25.0.1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.0.10-0ubuntu2.2"}]}],"versions":["2:11.0.0-0ubuntu2","2:11.0.0-0ubuntu3","2:12.0.0~b1-0ubuntu1","2:12.0.0~b2-0ubuntu2","2:12.0.0~rc1-0ubuntu1","2:12.0.0~rc2-0ubuntu1","2:12.0.0~rc2-0ubuntu2","2:12.0.0-0ubuntu1","2:12.0.1-0ubuntu1","2:12.0.3-0ubuntu1","2:12.0.4-0ubuntu1","2:12.0.5-0ubuntu1","2:12.0.7-0ubuntu2","2:12.0.9-0ubuntu1","2:12.0.9-0ubuntu1.2","2:12.0.10-0ubuntu1","2:12.0.10-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.4.2-0ubuntu2.2"}]}],"versions":["2:15.0.0-0ubuntu1","2:16.0.0~b2~git2020020407.819b4a0fc-0ubuntu1","2:16.0.0~b3~git2020032414.a0c0a9e23-0ubuntu1","2:16.0.0~b3~git2020041012.eb915e2db-0ubuntu1","2:16.0.0-0ubuntu0.20.04.1","2:16.1.0-0ubuntu1","2:16.2.0-0ubuntu1","2:16.2.1-0ubuntu1","2:16.2.1-0ubuntu2","2:16.3.0-0ubuntu1","2:16.4.0-0ubuntu1","2:16.4.1-0ubuntu1","2:16.4.2-0ubuntu2","2:16.4.2-0ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.0.13-0ubuntu5.2"}]}],"versions":["2:16.0.1-0ubuntu1","2:16.0.1-0ubuntu2","2:17.0.0~b1-0ubuntu1","2:17.0.0~b2-0ubuntu2","2:17.0.0~b3-0ubuntu3","2:17.0.0~b3-0ubuntu4","2:17.0.0~rc1-0ubuntu1","2:17.0.0~rc2-0ubuntu1","2:17.0.0~rc3-0ubuntu1","2:17.0.0-0ubuntu1","2:17.0.1-0ubuntu1","2:17.0.3-0ubuntu1","2:17.0.4-0ubuntu1","2:17.0.5-0ubuntu1","2:17.0.5-0ubuntu2","2:17.0.6-0ubuntu1","2:17.0.7-0ubuntu1","2:17.0.7-0ubuntu2","2:17.0.9-0ubuntu1","2:17.0.9-0ubuntu3","2:17.0.10-0ubuntu2","2:17.0.10-0ubuntu2.1","2:17.0.11-0ubuntu1","2:17.0.12-0ubuntu1","2:17.0.13-0ubuntu1","2:17.0.13-0ubuntu2","2:17.0.13-0ubuntu3","2:17.0.13-0ubuntu4","2:17.0.13-0ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.4.2-0ubuntu2.9"}]}],"versions":["2:15.0.0-0ubuntu1","2:16.0.0~b2~git2020020407.819b4a0fc-0ubuntu1","2:16.0.0~b3~git2020032414.a0c0a9e23-0ubuntu1","2:16.0.0~b3~git2020041012.eb915e2db-0ubuntu1","2:16.0.0-0ubuntu0.20.04.1","2:16.1.0-0ubuntu1","2:16.2.0-0ubuntu1","2:16.2.1-0ubuntu1","2:16.2.1-0ubuntu2","2:16.3.0-0ubuntu1","2:16.4.0-0ubuntu1","2:16.4.1-0ubuntu1","2:16.4.2-0ubuntu2","2:16.4.2-0ubuntu2.1","2:16.4.2-0ubuntu2.2","2:16.4.2-0ubuntu2.3","2:16.4.2-0ubuntu2.4","2:16.4.2-0ubuntu2.5","2:16.4.2-0ubuntu2.6","2:16.4.2-0ubuntu2.8"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:20.3.1-0ubuntu1.5"}]}],"versions":["2:19.0.0-0ubuntu2","2:19.0.0+git2022030310.b49fb59a6-0ubuntu1","2:19.0.0+git2022030310.b49fb59a6-0ubuntu2","2:20.0.0-0ubuntu1","2:20.0.1-0ubuntu1","2:20.1.0-0ubuntu1","2:20.1.0-0ubuntu2.1","2:20.1.0-0ubuntu2.2","2:20.2.0-0ubuntu1","2:20.2.0-0ubuntu1.1","2:20.3.0-0ubuntu1","2:20.3.1-0ubuntu1","2:20.3.1-0ubuntu1.1","2:20.3.1-0ubuntu1.2","2:20.3.1-0ubuntu1.4"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:24.0.0-0ubuntu1.3"}]}],"versions":["2:23.0.0-0ubuntu1","2:23.0.0-0ubuntu3","2:23.0.0+git2024011915.b8cd101f-0ubuntu1","2:23.0.0+git2024011915.b8cd101f-0ubuntu2","2:24.0.0~rc1-0ubuntu1","2:24.0.0-0ubuntu1","2:24.0.0-0ubuntu1.2"],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"openstack","product":"cinder"},{"vendor":"openstack","product":"glance"},{"vendor":"openstack","product":"nova"}],"references":[{"url":"https://launchpad.net/bugs/1996188","tags":["x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","web","article"]},{"url":"https://security.openstack.org/ossa/OSSA-2023-002.html","tags":["x_transferred","Patch","Vendor Advisory","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/01/msg00040.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/01/msg00041.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/01/msg00042.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://www.debian.org/security/2023/dsa-5336","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.debian.org/security/2023/dsa-5338","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.debian.org/security/2023/dsa-5337","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-47951","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-7h75-hwxx-qpgc","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/47xxx/CVE-2022-47951.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-47951","tags":["advisory"]},{"url":"https://pypi.org/project/cinder","tags":["package"]},{"url":"https://pypi.org/project/glance","tags":["package"]},{"url":"https://pypi.org/project/nova","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1015","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2161812","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1015.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-47951","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-47951","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1016","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1016.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1017","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1017.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1278","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1278.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1279","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1279.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1280","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1280.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230844-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1207321","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-47951","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231949-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-47951","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5835-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5835-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5835-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5835-4","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5835-5","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6882-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-32498","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-47951","description":"An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.","status":"published","published":"2023-01-26T00:00:00Z","modified":"2025-03-31T16:49:31.493Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:34:25.308772Z"}],"euvd":[{"id":"EUVD-2023-0384","description":"An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.","status":"published","published":"2023-01-26T00:00:00Z","modified":"2025-03-31T16:49:31Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:46.759966Z"}],"ghsa":[{"id":"GHSA-7h75-hwxx-qpgc","title":"OpenStack Cinder, glance, and Nova vulnerable to Path Traversal","description":"An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.","status":"published","published":"2023-01-27T00:30:19Z","modified":"2023-02-08T21:35:26Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:36:44.81167Z"}],"nvd":[{"id":"CVE-2022-47951","description":"An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.","status":"published","published":"2023-01-26T22:15:25.823Z","modified":"2026-06-17T05:14:30.817Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:07:35.561816Z"}],"osv":[{"id":"CVE-2022-47951","description":"An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.","status":"published","published":"2023-01-26T00:00:00Z","modified":"2026-10-28T02:30:57.288020307Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:27.776402Z"},{"id":"GHSA-7h75-hwxx-qpgc","title":"OpenStack Cinder, glance, and Nova vulnerable to Path Traversal","description":"An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.","status":"published","published":"2023-01-27T00:30:19Z","modified":"2026-07-13T16:43:47.43279881Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T15:46:41.002603Z"},{"id":"PYSEC-2026-2411","title":"OpenStack Cinder, glance, and Nova vulnerable to Path Traversal","description":"An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.","status":"published","published":"2026-07-13T14:19:56.761789Z","modified":"2026-07-13T16:43:47.43279881Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:55.961245Z"},{"id":"PYSEC-2026-2490","title":"OpenStack Cinder, glance, and Nova vulnerable to Path Traversal","description":"An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.","status":"published","published":"2026-07-13T14:19:56.933094Z","modified":"2026-07-13T16:43:47.43279881Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:55.961245Z"},{"id":"PYSEC-2026-868","title":"OpenStack Cinder, glance, and Nova vulnerable to Path Traversal","description":"An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.","status":"published","published":"2026-07-07T10:17:27.389246Z","modified":"2026-07-13T16:43:47.43279881Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"RHSA-2023:1015","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 17.0 (openstack-nova) security update","status":"published","published":"2024-09-13T21:08:20Z","modified":"2026-08-01T10:03:17Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1016","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 17.0 (openstack-cinder) security update","status":"published","published":"2024-09-13T21:08:11Z","modified":"2026-08-01T10:03:18Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1017","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 17.0 (openstack-glance) security update","status":"published","published":"2024-09-13T21:07:54Z","modified":"2026-08-01T10:03:18Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1278","title":"Red Hat Security Advisory: Red Hat OpenStack Platform (openstack-nova) security update","status":"published","published":"2024-09-13T21:08:55Z","modified":"2026-08-01T10:03:19Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1279","title":"Red Hat Security Advisory: Synopsis: Red Hat OpenStack Platform (openstack-cinder) security update","status":"published","published":"2024-09-13T21:08:26Z","modified":"2026-08-01T10:03:20Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1280","title":"Red Hat Security Advisory: Synopsis: Red Hat OpenStack Platform (openstack-glance) security update","status":"published","published":"2024-09-13T21:08:44Z","modified":"2026-08-01T10:03:21Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"UBUNTU-CVE-2022-47951","description":"An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.","status":"published","published":"2023-01-27T00:00:00Z","modified":"2026-02-04T04:11:13.14258Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium"},{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:53:56.473586Z"},{"id":"DEBIAN-CVE-2022-47951","description":"An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.","status":"published","published":"2023-01-26T22:15:25.823Z","modified":"2026-11-03T06:03:02.819460421Z","updated_at":"2026-11-03T06:43:01.507088Z"},{"id":"DLA-3300-1","title":"glance - security update","status":"published","published":"2023-01-31T00:00:00Z","modified":"2026-03-09T01:19:02.43573Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DLA-3301-1","title":"cinder - security update","status":"published","published":"2023-01-31T00:00:00Z","modified":"2026-03-09T01:00:47.127977Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DLA-3302-1","title":"nova - security update","status":"published","published":"2023-01-31T00:00:00Z","modified":"2026-03-09T01:21:58.470293Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5336-1","title":"glance - security update","status":"published","published":"2023-02-01T00:00:00Z","modified":"2026-03-09T02:11:40.523817Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"DSA-5337-1","title":"nova - security update","status":"published","published":"2023-02-01T00:00:00Z","modified":"2026-03-09T02:11:43.169653Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"DSA-5338-1","title":"cinder - security update","status":"published","published":"2023-02-01T00:00:00Z","modified":"2026-03-09T02:10:03.30696Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"SUSE-SU-2023:0844-1","title":"Security update for openstack-cinder, openstack-glance, openstack-neutron-gbp, openstack-nova, python-oslo.utils","description":"This update for openstack-cinder, openstack-glance, openstack-neutron-gbp, openstack-nova, python-oslo.utils contains the following fixes:\n\nSecurity fixes included on this update:\n\nopenstack-cinder, openstack-glance, openstack-nova:\n\n- CVE-2022-47951: Fixed file access control through custom VMDK flat descriptor. (bsc#1207321)\n\nNon-security changes included on this update:\n\nChanges in openstack-cinder:\n-  Fixed file access control through custom VMDK flat descriptor. (bsc#1207321, CVE-2022-47951)\n\nChanges in openstack-glance:\n- Enforce image safety during image_conversion. (bsc#1207321, CVE-2022-47951)\n\nChanges in openstack-neutron-gbp:\n- Update to version group-based-policy-14.0.1.dev58:\n  * Add no nat cidrs network extension\n\n- Update to version group-based-policy-14.0.1.dev57:\n  * Cleanup stable branches\n\n- Update to version group-based-policy-14.0.1.dev56:\n  * Revert 'Add no nat cidrs network extension'\n  2014.2.0rc1\n\n- Update to version group-based-policy-14.0.1.dev55:\n  * Add no nat cidrs network extension\n  2014.2rc1\n\n- Update to version group-based-policy-14.0.1.dev54:\n  * Add python39 gate support\n  * Fixes for tox4\n\nChanges in openstack-nova:\n- Fixed file access control through custom VMDK flat descriptor. (bsc#1207321, CVE-2022-47951)\n\nChanges in python-oslo.utils:\n- Report format specific details when using JSON output format. (bsc#1207321)\n\n  ","status":"published","published":"2023-03-21T12:25:22Z","modified":"2026-02-04T03:11:38.422097Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:1949-1","title":"Security update for openstack-cinder, openstack-nova, python-oslo.utils","description":"This update for openstack-cinder, openstack-nova, python-oslo.utils contains the following fixes:\n\nSecurity fixes included on this update:\n\nopenstack-cinder, openstack-nova:\n\n- CVE-2022-47951: Fixed file access control through custom VMDK flat descriptor. (bsc#1207321)\n\nNon-security changes included on this update:\n\nChanges in openstack-cinder:\n-  Fixed file access control through custom VMDK flat descriptor. (bsc#1207321, CVE-2022-47951)\n\nChanges in openstack-nova:\n- Fixed file access control through custom VMDK flat descriptor. (bsc#1207321, CVE-2022-47951)\n\nChanges in python-oslo.utils:\n- Report format specific details when using JSON output format. (bsc#1207321)\n\n  ","status":"published","published":"2023-04-21T12:47:34Z","modified":"2026-02-04T02:41:18.391573Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"USN-5835-1","title":"cinder vulnerability","description":"Guillaume Espanel, Pierre Libeau, Arnaud Morin, and Damien Rannou\ndiscovered that Cinder incorrectly handled VMDK image processing. An\nauthenticated attacker could possibly supply a specially crafted VMDK flat\nimage and obtain arbitrary files from the server containing sensitive\ninformation.\n","status":"published","published":"2023-01-31T13:11:52Z","modified":"2026-04-27T15:19:04.85708Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-5835-2","title":"glance vulnerability","description":"Guillaume Espanel, Pierre Libeau, Arnaud Morin, and Damien Rannou\ndiscovered that OpenStack Glance incorrectly handled VMDK image processing.\nAn authenticated attacker could possibly supply a specially crafted VMDK\nflat image and obtain arbitrary files from the server containing sensitive\ninformation.\n","status":"published","published":"2023-01-31T13:07:57Z","modified":"2026-04-27T16:29:42.647997Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-5835-3","title":"nova vulnerability","description":"Guillaume Espanel, Pierre Libeau, Arnaud Morin, and Damien Rannou\ndiscovered that Nova incorrectly handled VMDK image processing. An\nauthenticated attacker could possibly supply a specially crafted VMDK flat\nimage and obtain arbitrary files from the server containing sensitive\ninformation.\n","status":"published","published":"2023-01-31T13:15:50Z","modified":"2026-04-27T16:31:00.32956Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-5835-4","title":"cinder vulnerability","description":"USN-5835-1 fixed vulnerabilities in Cinder. This update provides the\ncorresponding updates for Ubuntu 18.04 LTS. In addition, a regression was\nfixed for Ubuntu 20.04 LTS.\n\nOriginal advisory details:\n\n Guillaume Espanel, Pierre Libeau, Arnaud Morin, and Damien Rannou\n discovered that Cinder incorrectly handled VMDK image processing. An\n authenticated attacker could possibly supply a specially crafted VMDK flat\n image and obtain arbitrary files from the server containing sensitive\n information.\n","status":"published","published":"2023-02-09T12:26:36Z","modified":"2026-04-27T16:31:03.550476Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-5835-5","title":"nova vulnerability","description":"USN-5835-3 fixed vulnerabilities in Nova. This update provides the\ncorresponding updates for Ubuntu 18.04 LTS.\n\nOriginal advisory details:\n\n Guillaume Espanel, Pierre Libeau, Arnaud Morin, and Damien Rannou\n discovered that Nova incorrectly handled VMDK image processing. An\n authenticated attacker could possibly supply a specially crafted VMDK flat\n image and obtain arbitrary files from the server containing sensitive\n information.\n","status":"published","published":"2023-02-09T14:44:47Z","modified":"2026-04-27T16:30:10.27549Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-6882-2","title":"cinder regression","description":"USN-6882-1 fixed vulnerabilities in Cinder. The update caused a regression\nin certain environments due to incorrect privilege handling. This update\nfixes the problem.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n Martin Kaesberger discovered that Cinder incorrectly handled QCOW2 image\n processing. An authenticated user could use this issue to access arbitrary\n files on the server, possibly exposing sensitive information.\n","status":"published","published":"2024-11-07T12:27:10Z","modified":"2026-04-27T17:20:00.767567Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}