{"action":"Upgrade cinder to 19.1.2 or later.","affected":[{"fixed":"19.1.2","introduced":"0"},{"fixed":"20.0.2","introduced":"20.0.0"}],"component":"cinder","cve_ids":["CVE-2022-47951"],"ecosystem":"PyPI","epss":0.01034,"exploited":false,"fixed_versions":["19.1.2","20.0.2"],"ghsa_id":"GHSA-7h75-hwxx-qpgc","id":"tcs_01M5KF61H81HHG6C8BP9QAHQ3A","modified_at":"2026-07-13T16:43:47.432798810Z","published_at":"2023-01-27T00:30:19Z","references":["https://osv.dev/vulnerability/GHSA-7h75-hwxx-qpgc","https://nvd.nist.gov/vuln/detail/CVE-2022-47951","https://launchpad.net/bugs/1996188","https://lists.debian.org/debian-lts-announce/2023/01/msg00040.html","https://lists.debian.org/debian-lts-announce/2023/01/msg00041.html","https://lists.debian.org/debian-lts-announce/2023/01/msg00042.html","https://security.openstack.org/ossa/OSSA-2023-002.html","https://www.debian.org/security/2023/dsa-5336","https://www.debian.org/security/2023/dsa-5337","https://www.debian.org/security/2023/dsa-5338"],"severity":{"label":"medium","score":5.7},"sources":[{"source":"osv","source_id":"GHSA-7h75-hwxx-qpgc","url":"https://osv.dev/vulnerability/GHSA-7h75-hwxx-qpgc"}],"summary":"OpenStack Cinder, glance, and Nova vulnerable to Path Traversal"}