{"action":"Upgrade murano to 1.0.3 or later.","affected":[{"fixed":"1.0.3","introduced":"0"}],"component":"murano","cve_ids":["CVE-2016-4972"],"ecosystem":"PyPI","epss":0.03193,"exploited":false,"fixed_versions":["1.0.3"],"ghsa_id":"GHSA-87r7-q54j-f9qg","id":"tcs_01M5KF7J9ZFG3JV6Y67E8YSCM7","modified_at":"2026-06-29T12:26:46.584121738Z","published_at":"2022-05-17T03:48:22Z","references":["https://osv.dev/vulnerability/GHSA-87r7-q54j-f9qg","https://nvd.nist.gov/vuln/detail/CVE-2016-4972","https://github.com/openstack/murano/commit/28de8c36c9dbe4aaf4d062e6fb6099afd437f49b","https://bugs.launchpad.net/murano/+bug/1586079","https://bugs.launchpad.net/python-muranoclient/+bug/1586078","https://github.com/openstack/murano","https://github.com/openstack/murano/blob/c898a310afbc27f12190446ef75d8b0bd12115eb/releasenotes/notes/safeloader-cve-2016-4972-19035a2a091ec30a.yaml","https://github.com/openstack/murano/blob/c898a310afbc27f12190446ef75d8b0bd12115eb/releasenotes/source/locale/en_GB/LC_MESSAGES/releasenotes.po","https://github.com/pypa/advisory-database/tree/main/vulns/python-muranoclient/PYSEC-2016-22.yaml","http://www.openwall.com/lists/oss-security/2016/06/23/8"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-87r7-q54j-f9qg","url":"https://osv.dev/vulnerability/GHSA-87r7-q54j-f9qg"}],"summary":"OpenStack Murano Code Execution"}