CVE-2024-53916
2 advisories.
PyPI/neutron CVE-2024-53916: high 7.5, EPSS 0.71%
OpenStack Neutron can use an incorrect ID during policy enforcement
Action: Upgrade neutron to 23.2.1 or later.
pip install neutron==23.2.1pip install neutron==24.0.2pip install neutron==25.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 23.0.0 | 23.2.1 | - |
| 24.0.0 | 24.0.2 | - |
| 25.0.0 | 25.0.1 | - |
Fixed versions
| 23.2.1 | 24.0.2 | 25.0.1 |
Sources
- osv: GHSA-f27h-g923-68hw
- https://nvd.nist.gov/vuln/detail/CVE-2024-53916
- https://github.com/openstack/neutron
- https://github.com/openstack/neutron/blob/363ffa6e9e1ab5968f87d45bc2f1cb6394f48b9f/neutron/extensions/tagging.py#L138-L232
- https://review.opendev.org/c/openstack/neutron/+/935883
- https://review.opendev.org/q/project:openstack/neutron
- https://security.openstack.org/ossa/OSSA-2024-005.html
- http://www.openwall.com/lists/oss-security/2024/12/03/1
CVE-2024-53916 · published · modified · JSON
PyPI/neutron CVE-2024-53916: high 7.5, EPSS 0.71%
OpenStack Neutron can use an incorrect ID during policy enforcement
Action: Upgrade neutron to 23.2.1 or later.
pip install neutron==23.2.1pip install neutron==24.0.2pip install neutron==25.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 23.0.0 | 23.2.1 | - |
| 24.0.0 | 24.0.2 | - |
| 25.0.0 | 25.0.1 | - |
Fixed versions
| 23.2.1 | 24.0.2 | 25.0.1 |
Sources
- osv: PYSEC-2026-1693
- https://nvd.nist.gov/vuln/detail/CVE-2024-53916
- https://github.com/openstack/neutron
- https://github.com/openstack/neutron/blob/363ffa6e9e1ab5968f87d45bc2f1cb6394f48b9f/neutron/extensions/tagging.py#L138-L232
- https://review.opendev.org/c/openstack/neutron/+/935883
- https://review.opendev.org/q/project:openstack/neutron
- https://security.openstack.org/ossa/OSSA-2024-005.html
- http://www.openwall.com/lists/oss-security/2024/12/03/1
- https://pypi.org/project/neutron
- https://github.com/advisories/GHSA-f27h-g923-68hw
CVE-2024-53916 · published · modified · JSON