LOW3.3PyPI
GHSA-22jm-4hxw-35jf· CVE-2015-9543, PYSEC-2026-857OpenStack Nova can leak consoleauth token into log files
Modified: 7/7/2026
package
PyPI/nova
pkg:pypi/nova
MEDIUMPyPI
GHSA-22w9-j288-8p9w· CVE-2013-6419, PYSEC-2026-858OpenStack Nova Router metadata queries are not restricted by tenant
Modified: 7/7/2026
MEDIUMPyPI
GHSA-27q4-38qf-m25h· CVE-2013-4497, PYSEC-2026-859OpenStack Compute Nova Improper Access Control
Modified: 7/7/2026
LOWPyPI
GHSA-2w87-5qcj-j6gx· CVE-2013-4469, PYSEC-2026-860OpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 image
Modified: 7/7/2026
MEDIUMPyPI
GHSA-3vx7-xff6-h2vx· CVE-2015-3241, PYSEC-2026-861OpenStack Nova instance migration process does not stop when instance is deleted
Modified: 9/10/2026
LOWPyPI
GHSA-43cm-73px-5v4m· CVE-2013-4278, PYSEC-2026-862OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors
Modified: 7/7/2026
MEDIUMPyPI
GHSA-43hc-pwvx-pmfg· CVE-2014-3708, PYSEC-2026-863OpenStack Compute (Nova) Denial of Service vulnerability
Modified: 9/10/2026
MEDIUMPyPI
GHSA-46r8-9cj7-pw6g· CVE-2012-2654OpenStack Compute (Nova) Improper Input Validation
Modified: 11/22/2024
MEDIUM5.3PyPI
GHSA-49jv-37hm-6gfp· CVE-2016-2140, PYSEC-2026-864OpenStack Nova host data access through resize/migration
Modified: 7/7/2026
LOWPyPI
GHSA-5644-2v3h-5w4x· CVE-2013-4463, PYSEC-2026-865OpenStack Nova denial of service through compressed disk images
Modified: 7/7/2026
MEDIUMPyPI
GHSA-5mj6-643f-2g85· CVE-2013-2256, PYSEC-2026-866OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information
Modified: 9/10/2026
MEDIUM6.5PyPI
GHSA-63fq-8fp9-vhwq· CVE-2013-1838, PYSEC-2013-44OpenStack Compute (Nova) Denial of service via a large number of calls to the addFixedIp function
Modified: 11/26/2024
MEDIUMPyPI
GHSA-67rh-9p29-vrxr· CVE-2015-7713, PYSEC-2026-867OpenStack Compute (Nova) allows remote attackers to bypass intended restriction
Modified: 9/10/2026
MEDIUM5.7PyPI
GHSA-7h75-hwxx-qpgc· CVE-2022-47951, PYSEC-2026-2411OpenStack Cinder, glance, and Nova vulnerable to Path Traversal
Modified: 7/13/2026
MEDIUMPyPI
GHSA-92hc-c226-32q7· CVE-2014-3608, PYSEC-2026-869OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service
Modified: 9/10/2026
MEDIUM4.7PyPI
GHSA-97fv-22hc-mrgj· CVE-2015-2687, PYSEC-2017-145OpenStack Compute (Nova) Improper Access Control
Modified: 11/26/2024
HIGH7.5PyPI
GHSA-99rx-9x8v-9j8p· CVE-2013-7130, PYSEC-2014-111OpenStack Nova Live migration can leak root disk into ephemeral storage
Modified: 11/26/2024
MEDIUM5.9PyPI
GHSA-c36r-g737-9qp8· CVE-2015-8749, PYSEC-2026-870OpenStack Nova Potential Xen connection password leak via StorageError
Modified: 7/7/2026
HIGH8.3PyPI
GHSA-c7w7-9c85-4qxv· CVE-2020-17376, PYSEC-2020-243OpenStack Nova Live migration fails to update persistent domain XML
Modified: 9/26/2024
MEDIUMPyPI
GHSA-cm54-3vvf-f5p8· CVE-2012-3361OpenStack Nova Arbitrary file injection/corruption through directory traversal issues
Modified: 11/22/2024
CRITICAL9.8PyPI
GHSA-f4g4-cj8f-3cr9· CVE-2017-7214, PYSEC-2026-432OpenStack Nova logs sensitive context from notification exceptions
Modified: 6/29/2026
HIGH7.5PyPI
GHSA-ffmh-r67w-m88f· CVE-2017-18191, PYSEC-2026-689OpenStack Nova Denial of service attack on the compute host
Modified: 7/6/2026
HIGH7.5PyPI
GHSA-g2j5-7vgx-6xrx· CVE-2015-5162, PYSEC-2026-2412OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption
Modified: 7/13/2026
MEDIUMPyPI
GHSA-g63p-mfcm-54c4· CVE-2014-8333, PYSEC-2026-872OpenStack Nova VMware instance leak potentially leading to compute DoS
Modified: 7/7/2026
LOWPyPI
GHSA-grp5-h379-j75x· CVE-2013-7048, PYSEC-2026-873OpenStack Nova live snapshots use an insecure local directory
Modified: 7/7/2026
LOWPyPI
GHSA-hq3f-9gf7-73r8· CVE-2012-2101Openstack Compute (Nova) Denial of service via network request that triggers large number of iptables rules
Modified: 11/22/2024
LOW2.8PyPI
GHSA-hqfx-4x4w-vmwp· CVE-2011-3147, PYSEC-2026-690Openstack nova qcow format could expose host filesystem information
Modified: 7/6/2026
MEDIUMPyPI
GHSA-hrv9-4x4c-9jc8· CVE-2013-6437, PYSEC-2026-874OpenStack Nova DoS through ephemeral disk backing files
Modified: 7/7/2026
MEDIUMPyPI
GHSA-j6xh-q826-55jw· CVE-2013-4179, PYSEC-2026-875OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack
Modified: 9/10/2026
MEDIUM6.5PyPI
GHSA-jv34-xvjq-ppch· CVE-2014-2573, PYSEC-2014-113OpenStack Nova VMWare driver leaks rescued images
Modified: 11/26/2024
MEDIUMPyPI
GHSA-m454-cm7h-rqhh· CVE-2012-3360OpenStack Nova Directory traversal vulnerability
Modified: 11/22/2024
HIGH8.2PyPI
GHSA-m4f3-qp2w-gwh6· CVE-2026-24708, PYSEC-2026-2685OpenStack Nova calls qemu-img without format restrictions for resize
Modified: 7/13/2026
MEDIUMPyPI
GHSA-m674-hmx2-ffhq· CVE-2013-2096, PYSEC-2026-876OpenStack Compute (Nova) does not verify the virtual size of a QCOW2 image
Modified: 7/7/2026
MEDIUM5.4PyPI
GHSA-mfg3-p6m3-gjgr· CVE-2026-46448, PYSEC-2026-2686OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
Modified: 9/10/2026
MEDIUMPyPI
GHSA-mfmj-gwg3-vhw7· CVE-2015-3280, PYSEC-2026-877OpenStack Compute (nova) allows remote authenticated users to cause a denial of service
Modified: 9/10/2026
MEDIUMPyPI
GHSA-p258-xmh3-72pv· CVE-2014-0167, PYSEC-2026-878OpenStack Compute (Nova) allows remote authenticated users to gain privileges via API requests
Modified: 7/7/2026
MEDIUM6.5PyPI
GHSA-pg64-r7rr-phv8· CVE-2019-14433, PYSEC-2019-191OpenStack Nova Server Resource Faults Leak External Exception Details
Modified: 10/7/2024
MEDIUMPyPI
GHSA-ph2h-hh49-vh27· CVE-2013-4185, PYSEC-2026-879OpenStack Nova Denial of Service in network source security groups
Modified: 7/7/2026
MEDIUMPyPI
GHSA-pjvw-p2v5-wf6q· CVE-2012-1585, PYSEC-2026-880OpenStack Nova Long server names grow nova-api log files significantly
Modified: 7/7/2026
MEDIUM6.5PyPI
GHSA-qfp8-hfqx-c79c· CVE-2013-0335, PYSEC-2013-43OpenStack Compute Nova Unauthorised access to arbitrary VM using VNC token from deleted VM
Modified: 11/26/2024
MEDIUMPyPI
GHSA-qr62-r9xc-r2gj· CVE-2011-4596, PYSEC-2026-881OpenStack Nova Multiple directory traversal vulnerabilities
Modified: 7/7/2026
MEDIUM6.5PyPI
GHSA-r4v4-w9pv-6fph· CVE-2024-32498, PYSEC-2026-1708OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
Modified: 7/13/2026
MEDIUM6.5PyPI
GHSA-rm86-h44c-2r2m· CVE-2024-40767, PYSEC-2026-1709OpenStack Nova vulnerable to unauthorized access to potentially sensitive data
Modified: 7/7/2026
MEDIUMPyPI
GHSA-rwhr-h69g-8qmq· CVE-2012-5625, PYSEC-2012-42OpenStack Nova Information leak in libvirt LVM-backed instances
Modified: 6/8/2026
LOW3.3PyPI
GHSA-v725-c588-h936· CVE-2022-37394, PYSEC-2026-882OpenStack Nova Changing vnic_type breaks compute service restart
Modified: 7/7/2026
MEDIUM5.9PyPI
GHSA-vcmv-6rxx-fh7r· CVE-2011-4076, PYSEC-2026-691OpenStack Nova Exposure of Sensitive Information to an Unauthorized Actor
Modified: 7/6/2026
HIGH8.6PyPI
GHSA-vq76-rxx3-4r4r· CVE-2017-17051, PYSEC-2026-692OpenStack Nova DoS by rebuilding the same instance with a new image multiple times
Modified: 7/6/2026
MEDIUM6.1PyPI
GHSA-vqp6-j452-j6wp· CVE-2021-3654, PYSEC-2026-693Open Redirect in CPython that affects users of OpenStack Nova
Modified: 7/6/2026
MEDIUM6.5PyPI
GHSA-w2wf-cgwh-vpqg· CVE-2017-16239, PYSEC-2026-694OpenStack Nova Filter Scheduler Bypass
Modified: 7/6/2026
LOW3.1PyPI
GHSA-w429-xc55-hc48· CVE-2014-0134, PYSEC-2014-112OpenStack Nova host data leak to vm instance in rescue mode
Modified: 11/26/2024
MEDIUMPyPI
GHSA-x8xr-rm9r-7mvf· CVE-2015-0259, PYSEC-2026-883OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity
Modified: 9/10/2026
MEDIUM6.5PyPI
GHSA-xc4g-7vw8-924h· CVE-2012-3447, PYSEC-2012-21Arbitrary file overwrite in OpenStack Nova
Modified: 10/1/2024
MEDIUMPyPI
GHSA-xjmj-p278-4jp5· CVE-2014-3517, PYSEC-2026-884OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability
Modified: 9/10/2026
LOWPyPI
GHSA-xxgm-qpj5-4886· CVE-2012-3371OpenStack Nova Scheduler denial of service through scheduler_hints
Modified: 11/22/2024
—PyPI
PYSEC-2012-21· CVE-2012-3447, GHSA-xc4g-7vw8-924hModified: 6/10/2026
—PyPI
PYSEC-2012-42· CVE-2012-5625, GHSA-rwhr-h69g-8qmqModified: 6/10/2026
—PyPI
PYSEC-2013-43· CVE-2013-0335, GHSA-qfp8-hfqx-c79cModified: 11/25/2024
—PyPI
PYSEC-2013-44· CVE-2013-1838, GHSA-63fq-8fp9-vhwqModified: 11/25/2024
—PyPI
PYSEC-2014-111· CVE-2013-7130, GHSA-99rx-9x8v-9j8pModified: 11/25/2024
—PyPI
PYSEC-2014-112· CVE-2014-0134, GHSA-w429-xc55-hc48Modified: 11/25/2024
—PyPI
PYSEC-2014-113· CVE-2014-2573, GHSA-jv34-xvjq-ppchModified: 11/25/2024
MEDIUM4.7PyPI
PYSEC-2017-145· CVE-2015-2687, GHSA-97fv-22hc-mrgjModified: 11/25/2024
—PyPI
PYSEC-2019-191· CVE-2019-14433, GHSA-pg64-r7rr-phv8Modified: 6/10/2026
—PyPI
PYSEC-2020-243· CVE-2020-17376, GHSA-c7w7-9c85-4qxvModified: 6/10/2026
MEDIUM6.5PyPI
PYSEC-2026-1708· CVE-2024-32498, GHSA-r4v4-w9pv-6fphOpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
Modified: 7/13/2026
MEDIUM6.5PyPI
PYSEC-2026-1709· CVE-2024-40767, GHSA-rm86-h44c-2r2mOpenStack Nova vulnerable to unauthorized access to potentially sensitive data
Modified: 7/7/2026
HIGH8.2PyPI
PYSEC-2026-2685· CVE-2026-24708, GHSA-m4f3-qp2w-gwh6OpenStack Nova calls qemu-img without format restrictions for resize
Modified: 7/13/2026
MEDIUM5.4PyPI
PYSEC-2026-2686· CVE-2026-46448, GHSA-mfg3-p6m3-gjgrOpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
Modified: 7/13/2026
CRITICAL9.8PyPI
PYSEC-2026-432· CVE-2017-7214, GHSA-f4g4-cj8f-3cr9OpenStack Nova logs sensitive context from notification exceptions
Modified: 7/2/2026
HIGH7.5PyPI
PYSEC-2026-689· CVE-2017-18191, GHSA-ffmh-r67w-m88fOpenStack Nova Denial of service attack on the compute host
Modified: 7/6/2026
LOW2.8PyPI
PYSEC-2026-690· CVE-2011-3147, GHSA-hqfx-4x4w-vmwpOpenstack nova qcow format could expose host filesystem information
Modified: 7/6/2026
MEDIUM5.9PyPI
PYSEC-2026-691· CVE-2011-4076, GHSA-vcmv-6rxx-fh7rOpenStack Nova Exposure of Sensitive Information to an Unauthorized Actor
Modified: 7/6/2026
HIGH8.6PyPI
PYSEC-2026-692· CVE-2017-17051, GHSA-vq76-rxx3-4r4rOpenStack Nova DoS by rebuilding the same instance with a new image multiple times
Modified: 7/6/2026
MEDIUM6.1PyPI
PYSEC-2026-693· CVE-2021-3654, GHSA-vqp6-j452-j6wpOpen Redirect in CPython that affects users of OpenStack Nova
Modified: 7/6/2026
MEDIUM6.5PyPI
PYSEC-2026-694· CVE-2017-16239, GHSA-w2wf-cgwh-vpqgOpenStack Nova Filter Scheduler Bypass
Modified: 7/6/2026
LOW3.3PyPI
PYSEC-2026-857· CVE-2015-9543, GHSA-22jm-4hxw-35jfOpenStack Nova can leak consoleauth token into log files
Modified: 7/7/2026
—PyPI
PYSEC-2026-858· CVE-2013-6419, GHSA-22w9-j288-8p9wOpenStack Nova Router metadata queries are not restricted by tenant
Modified: 7/7/2026
—PyPI
PYSEC-2026-859· CVE-2013-4497, GHSA-27q4-38qf-m25hOpenStack Compute Nova Improper Access Control
Modified: 7/7/2026
—PyPI
PYSEC-2026-860· CVE-2013-4469, GHSA-2w87-5qcj-j6gxOpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 image
Modified: 7/7/2026
—PyPI
PYSEC-2026-861· CVE-2015-3241, GHSA-3vx7-xff6-h2vxOpenStack Nova instance migration process does not stop when instance is deleted
Modified: 7/7/2026
—PyPI
PYSEC-2026-862· CVE-2013-4278, GHSA-43cm-73px-5v4mOpenStack Compute (Nova) Resource limit circumvention in Nova private flavors
Modified: 7/7/2026
—PyPI
PYSEC-2026-863· CVE-2014-3708, GHSA-43hc-pwvx-pmfgOpenStack Compute (Nova) Denial of Service vulnerability
Modified: 7/7/2026
MEDIUM5.3PyPI
PYSEC-2026-864· CVE-2016-2140, GHSA-49jv-37hm-6gfpOpenStack Nova host data access through resize/migration
Modified: 7/7/2026
—PyPI
PYSEC-2026-865· CVE-2013-4463, GHSA-5644-2v3h-5w4xOpenStack Nova denial of service through compressed disk images
Modified: 7/7/2026
—PyPI
PYSEC-2026-866· CVE-2013-2256, GHSA-5mj6-643f-2g85OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information
Modified: 7/7/2026
—PyPI
PYSEC-2026-867· CVE-2015-7713, GHSA-67rh-9p29-vrxrOpenStack Compute (Nova) allows remote attackers to bypass intended restriction
Modified: 7/7/2026
MEDIUM5.7PyPI
PYSEC-2026-868· CVE-2022-47951, GHSA-7h75-hwxx-qpgcOpenStack Cinder, glance, and Nova vulnerable to Path Traversal
Modified: 7/13/2026
—PyPI
PYSEC-2026-869· CVE-2014-3608, GHSA-92hc-c226-32q7OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service
Modified: 7/7/2026
MEDIUM5.9PyPI
PYSEC-2026-870· CVE-2015-8749, GHSA-c36r-g737-9qp8OpenStack Nova Potential Xen connection password leak via StorageError
Modified: 7/7/2026
HIGH7.5PyPI
PYSEC-2026-871· CVE-2015-5162, GHSA-g2j5-7vgx-6xrxOpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption
Modified: 7/13/2026
—PyPI
PYSEC-2026-872· CVE-2014-8333, GHSA-g63p-mfcm-54c4OpenStack Nova VMware instance leak potentially leading to compute DoS
Modified: 7/7/2026
—PyPI
PYSEC-2026-873· CVE-2013-7048, GHSA-grp5-h379-j75xOpenStack Nova live snapshots use an insecure local directory
Modified: 7/7/2026
—PyPI
PYSEC-2026-874· CVE-2013-6437, GHSA-hrv9-4x4c-9jc8OpenStack Nova DoS through ephemeral disk backing files
Modified: 7/7/2026
—PyPI
PYSEC-2026-875· CVE-2013-4179, GHSA-j6xh-q826-55jwOpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack
Modified: 7/7/2026
—PyPI
PYSEC-2026-876· CVE-2013-2096, GHSA-m674-hmx2-ffhqOpenStack Compute (Nova) does not verify the virtual size of a QCOW2 image
Modified: 7/7/2026
—PyPI
PYSEC-2026-877· CVE-2015-3280, GHSA-mfmj-gwg3-vhw7OpenStack Compute (nova) allows remote authenticated users to cause a denial of service
Modified: 7/7/2026
—PyPI
PYSEC-2026-878· CVE-2014-0167, GHSA-p258-xmh3-72pvOpenStack Compute (Nova) allows remote authenticated users to gain privileges via API requests
Modified: 7/7/2026
—PyPI
PYSEC-2026-879· CVE-2013-4185, GHSA-ph2h-hh49-vh27OpenStack Nova Denial of Service in network source security groups
Modified: 7/7/2026
—PyPI
PYSEC-2026-880· CVE-2012-1585, GHSA-pjvw-p2v5-wf6qOpenStack Nova Long server names grow nova-api log files significantly
Modified: 7/7/2026
—PyPI
PYSEC-2026-881· CVE-2011-4596, GHSA-qr62-r9xc-r2gjOpenStack Nova Multiple directory traversal vulnerabilities
Modified: 7/7/2026