Debian/vitrage: critical 9.1
In the query parser in OpenStack Vitrage before 12.0.1, 13.0.0, 14.0.0, and 15.0.0, a user allowed to access the Vitrage API may trigger code execution on the Vitrage service host as the user the Vitr
Action: Upgrade vitrage to 14.0.0-4+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 14.0.0-4+deb13u1 | - |
Fixed versions
| 14.0.0-4+deb13u1 |
Sources
- osv: DEBIAN-CVE-2026-28370#Debian:13/vitrage
- https://security-tracker.debian.org/tracker/CVE-2026-28370
published · modified · JSON