CVE-2026-54421

2 advisories.

PyPI/ironic CVE-2026-54421: medium 6.8

OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume properties

Action: Upgrade ironic to 29.0.6 or later.

pip install ironic==29.0.6

pip install ironic==32.0.2

pip install ironic==35.0.2

pip install ironic==37.0.1

Affected

introduced	fixed	last affected
17.0.0	29.0.6	-
30.0.0	32.0.2	-
33.0.0	35.0.2	-
36.0.0	37.0.1	-

Fixed versions

29.0.6

32.0.2

35.0.2

37.0.1

Sources

CVE-2026-54421 · published 2026-06-14T06:30:24Z · modified 2026-09-10T12:25:40.898686358Z · JSON

PyPI/ironic CVE-2026-54421: medium 6.8

OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume properties

Action: Upgrade ironic to 29.0.6 or later.

pip install ironic==29.0.6

pip install ironic==32.0.2

pip install ironic==35.0.2

pip install ironic==37.0.1

Affected

introduced	fixed	last affected
17.0.0	29.0.6	-
30.0.0	32.0.2	-
33.0.0	35.0.2	-
36.0.0	37.0.1	-

Fixed versions

29.0.6

32.0.2

35.0.2

37.0.1

Sources

CVE-2026-54421 · published 2026-09-10T09:44:49.987426Z · modified 2026-09-10T12:15:03.995670523Z · JSON