{"action":"Upgrade openstack-heat to 5.0.0a0 or later.","affected":[{"fixed":"5.0.0a0","introduced":"0"}],"component":"openstack-heat","cve_ids":["CVE-2014-3801"],"ecosystem":"PyPI","epss":0.01634,"exploited":false,"fixed_versions":["5.0.0a0"],"ghsa_id":"GHSA-86qj-4h55-fvpw","id":"tcs_01M5KF7EK76GTKGKZPVDAZB6NJ","modified_at":"2026-07-07T11:56:28.897697465Z","published_at":"2022-05-14T04:01:58Z","references":["https://osv.dev/vulnerability/GHSA-86qj-4h55-fvpw","https://nvd.nist.gov/vuln/detail/CVE-2014-3801","https://bugs.launchpad.net/heat/+bug/1311223","https://git.openstack.org/cgit/openstack/heat","https://git.openstack.org/cgit/openstack/heat/commit/?id=03dd894de4ad905dc170e358fad27d9c8ed62a73","https://git.openstack.org/cgit/openstack/heat/commit/?id=7e114a38712da8947ee7ad93eabda34f5e4aa65a","https://git.openstack.org/cgit/openstack/heat/commit/?id=a02ff20509171346d2a1d2a9df7c81aada134c52","https://web.archive.org/web/20200229061233/https://www.securityfocus.com/bid/67505","http://rhn.redhat.com/errata/RHSA-2014-1687.html","http://www.openwall.com/lists/oss-security/2014/05/20/1","http://www.openwall.com/lists/oss-security/2014/05/20/6","http://www.ubuntu.com/usn/USN-2249-1"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-86qj-4h55-fvpw","url":"https://osv.dev/vulnerability/GHSA-86qj-4h55-fvpw"}],"summary":"OpenStack Heat template URL information leakage"}