PyPI/murano-dashboard CVE-2016-4972: critical 9.8, EPSS 3.19%
OpenStack Murano Code Execution
Action: Upgrade murano-dashboard to 1.0.3 or later.
pip install murano-dashboard==1.0.3pip install murano-dashboard==2.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.3 | - |
| 2.0.0 | 2.0.1 | - |
Fixed versions
| 1.0.3 | 2.0.1 |
Sources
- osv: GHSA-87r7-q54j-f9qg#PyPI/murano-dashboard
- https://nvd.nist.gov/vuln/detail/CVE-2016-4972
- https://github.com/openstack/murano/commit/28de8c36c9dbe4aaf4d062e6fb6099afd437f49b
- https://bugs.launchpad.net/murano/+bug/1586079
- https://bugs.launchpad.net/python-muranoclient/+bug/1586078
- https://github.com/openstack/murano
- https://github.com/openstack/murano/blob/c898a310afbc27f12190446ef75d8b0bd12115eb/releasenotes/notes/safeloader-cve-2016-4972-19035a2a091ec30a.yaml
- https://github.com/openstack/murano/blob/c898a310afbc27f12190446ef75d8b0bd12115eb/releasenotes/source/locale/en_GB/LC_MESSAGES/releasenotes.po
- https://github.com/pypa/advisory-database/tree/main/vulns/python-muranoclient/PYSEC-2016-22.yaml
- http://www.openwall.com/lists/oss-security/2016/06/23/8
CVE-2016-4972 · published · modified · JSON