PyPI/nova CVE-2021-3654: medium 6.1, EPSS 26.79%
Open Redirect in CPython that affects users of OpenStack Nova
Action: Upgrade nova to 21.2.3 or later.
pip install nova==21.2.3pip install nova==22.2.3pip install nova==23.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 21.2.3 | - |
| 22.0.0 | 22.2.3 | - |
| 23.0.0 | 23.0.3 | - |
Fixed versions
| 21.2.3 | 22.2.3 | 23.0.3 |
Sources
- osv: PYSEC-2026-693
- https://nvd.nist.gov/vuln/detail/CVE-2021-3654
- https://bugs.launchpad.net/nova/+bug/1927677
- https://bugs.python.org/issue32084
- https://bugzilla.redhat.com/show_bug.cgi?id=1961439
- https://opendev.org/openstack/nova
- https://opendev.org/openstack/nova/commit/04d48527b62a35d912f93bc75613a6cca606df66
- https://opendev.org/openstack/nova/commit/8906552cfc2525a44251d4cf313ece61e57251eb
- https://security.gentoo.org/glsa/202305-02
- https://security.openstack.org/ossa/OSSA-2021-002.html
- https://www.openwall.com/lists/oss-security/2021/07/29/2
- https://pypi.org/project/nova
- https://github.com/advisories/GHSA-vqp6-j452-j6wp
CVE-2021-3654 · published · modified · JSON