—PyPI
PYSEC-2012-18· CVE-2012-3540Modified: 10/9/2025
package
PyPI/horizon
pkg:pypi/horizon
—PyPI
PYSEC-2015-40· CVE-2015-3219, GHSA-rhjj-f6gq-6gx2Modified: 11/25/2024
—PyPI
PYSEC-2020-45· CVE-2020-29565, GHSA-f8fh-xp28-q59mModified: 6/10/2026
MEDIUM6.1PyPI
PYSEC-2023-153· CVE-2022-45582, GHSA-5pv6-rprw-82wvModified: 6/10/2026
MEDIUM6.0PyPI
PYSEC-2026-2519· CVE-2026-55748, GHSA-6wrm-x65g-hr4pOpenStack Horizon RC file generation does not escape special characters in project names
Modified: 7/13/2026
MEDIUM5.3PyPI
PYSEC-2026-2520· CVE-2026-43002, GHSA-vxvf-xvm3-p8j5OpenStack Horizon has Incorrect Behavior Order
Modified: 7/13/2026
—PyPI
PYSEC-2026-641· CVE-2014-3594, GHSA-8g68-2hcj-h8vgOpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability in the Host Aggregates interface
Modified: 7/6/2026
—PyPI
PYSEC-2026-642· CVE-2014-3473, GHSA-8vwv-2v7v-jmgrHorizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name
Modified: 7/6/2026
MEDIUM5.4PyPI
PYSEC-2026-643· CVE-2016-4428, GHSA-grm6-x6mr-q3cvOpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability
Modified: 7/6/2026
—PyPI
PYSEC-2026-644· CVE-2014-3474, GHSA-j57p-g33w-95c5OpenStack Horizon Cross-site scripting (XSS) vulnerability
Modified: 7/6/2026
MEDIUM4.8PyPI
PYSEC-2026-821· CVE-2017-7400, GHSA-47vp-44v9-rhgqOpenStack Horizon Cross-site Scripting (XSS)
Modified: 7/7/2026
—PyPI
PYSEC-2026-822· CVE-2014-0157, GHSA-cmg8-5c63-pg95OpenStack Dashboard (aka Horizon) vulnerable to Cross-site Scripting
Modified: 7/7/2026
MEDIUM4.8PyPI
GHSA-47vp-44v9-rhgq· CVE-2017-7400, PYSEC-2026-821OpenStack Horizon Cross-site Scripting (XSS)
Modified: 7/7/2026
MEDIUM6.1PyPI
GHSA-5pv6-rprw-82wv· CVE-2022-45582, PYSEC-2023-153Horizon Web Dashboard Open Redirect vulnerability
Modified: 9/20/2024
MEDIUM6.0PyPI
GHSA-6wrm-x65g-hr4p· CVE-2026-55748, PYSEC-2026-2519OpenStack Horizon RC file generation does not escape special characters in project names
Modified: 9/10/2026
LOWPyPI
GHSA-8g68-2hcj-h8vg· CVE-2014-3594, PYSEC-2026-641OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability in the Host Aggregates interface
Modified: 7/6/2026
MEDIUMPyPI
GHSA-8vwv-2v7v-jmgr· CVE-2014-3473, PYSEC-2026-642Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name
Modified: 7/6/2026
MEDIUMPyPI
GHSA-cmg8-5c63-pg95· CVE-2014-0157, PYSEC-2026-822OpenStack Dashboard (aka Horizon) vulnerable to Cross-site Scripting
Modified: 7/7/2026
MEDIUM6.1PyPI
GHSA-f8fh-xp28-q59m· CVE-2020-29565, PYSEC-2020-45OpenStack Horizon Open redirect in workflow forms
Modified: 9/20/2024
MEDIUM5.4PyPI
GHSA-grm6-x6mr-q3cv· CVE-2016-4428, PYSEC-2026-643OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability
Modified: 7/6/2026
LOWPyPI
GHSA-j57p-g33w-95c5· CVE-2014-3474, PYSEC-2026-644OpenStack Horizon Cross-site scripting (XSS) vulnerability
Modified: 7/6/2026
MEDIUMPyPI
GHSA-j772-hpmw-32rm· CVE-2012-2094OpenStack Horizon Cross-site scripting (XSS) vulnerability
Modified: 11/22/2024
MEDIUM6.1PyPI
GHSA-rhjj-f6gq-6gx2· CVE-2015-3219, PYSEC-2015-40OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability
Modified: 11/26/2024
MEDIUM5.3PyPI
GHSA-vxvf-xvm3-p8j5· CVE-2026-43002, PYSEC-2026-2520OpenStack Horizon has Incorrect Behavior Order
Modified: 7/13/2026
MEDIUMPyPI
GHSA-w7h9-8wr4-hwqh· CVE-2012-2144OpenStack Horizon Session Fixation
Modified: 11/22/2024