tocsin

CVE-2024-28718

2 advisories.

PyPI/magnum CVE-2024-28718: medium 6.3, EPSS 1.06%

OpenStack magnum vulnerable to time-of-check to time-of-use (TOCTOU) attack

Action: Upgrade magnum to 14.1.2 or later.

pip install magnum==14.1.2
pip install magnum==17.0.2
pip install magnum==16.0.2
pip install magnum==15.0.2

Affected

introducedfixedlast affected
014.1.2-
17.0.0.0rc117.0.2-
16.0.0.0rc116.0.2-
15.0.0.0rc115.0.2-

Fixed versions

14.1.217.0.216.0.215.0.2

Sources

CVE-2024-28718 · published · modified · JSON

PyPI/magnum CVE-2024-28718: medium 6.3, EPSS 1.06%

OpenStack magnum vulnerable to time-of-check to time-of-use (TOCTOU) attack

Action: Upgrade magnum to 14.1.2 or later.

pip install magnum==14.1.2
pip install magnum==15.0.2
pip install magnum==16.0.2
pip install magnum==17.0.2

Affected

introducedfixedlast affected
014.1.2-
15.0.0.0rc115.0.2-
16.0.0.0rc116.0.2-
17.0.0.0rc117.0.2-

Fixed versions

14.1.215.0.216.0.217.0.2

Sources

CVE-2024-28718 · published · modified · JSON