{"action":"Upgrade nova to 24.1.2 or later.","affected":[{"fixed":"24.1.2","introduced":"0"},{"fixed":"25.0.2","introduced":"25.0.0"}],"component":"nova","cve_ids":["CVE-2022-47951"],"ecosystem":"PyPI","epss":0.01034,"exploited":false,"fixed_versions":["24.1.2","25.0.2"],"ghsa_id":"GHSA-7h75-hwxx-qpgc","id":"tcs_01M5KF61X2HZWNNNV7C6VJSWZE","modified_at":"2026-07-13T16:43:47.432798810Z","published_at":"2023-01-27T00:30:19Z","references":["https://osv.dev/vulnerability/GHSA-7h75-hwxx-qpgc","https://nvd.nist.gov/vuln/detail/CVE-2022-47951","https://launchpad.net/bugs/1996188","https://lists.debian.org/debian-lts-announce/2023/01/msg00040.html","https://lists.debian.org/debian-lts-announce/2023/01/msg00041.html","https://lists.debian.org/debian-lts-announce/2023/01/msg00042.html","https://security.openstack.org/ossa/OSSA-2023-002.html","https://www.debian.org/security/2023/dsa-5336","https://www.debian.org/security/2023/dsa-5337","https://www.debian.org/security/2023/dsa-5338"],"severity":{"label":"medium","score":5.7},"sources":[{"source":"osv","source_id":"GHSA-7h75-hwxx-qpgc#PyPI/nova","url":"https://osv.dev/vulnerability/GHSA-7h75-hwxx-qpgc"}],"summary":"OpenStack Cinder, glance, and Nova vulnerable to Path Traversal"}