tocsin

CVE-2026-46448

2 advisories.

PyPI/nova CVE-2026-46448: medium 5.4

OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints

Action: Upgrade nova to 32.2.1 or later.

pip install nova==32.2.1
pip install nova==33.0.2

Affected

introducedfixedlast affected
18.0.0-31.3.0
32.0.032.2.1-
33.0.033.0.2-

Fixed versions

32.2.133.0.2

Sources

CVE-2026-46448 · published · modified · JSON

PyPI/nova CVE-2026-46448: medium 5.4

OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints

Action: Upgrade nova to 31.3.1 or later.

pip install nova==31.3.1
pip install nova==32.2.1
pip install nova==33.0.2

Affected

introducedfixedlast affected
18.0.031.3.1-
32.0.032.2.1-
33.0.033.0.2-

Fixed versions

31.3.132.2.133.0.2

Sources

CVE-2026-46448 · published · modified · JSON