{"action":"Upgrade tripleo-heat-templates to 11.6.1 or later.","affected":[{"fixed":"11.6.1","introduced":"0"}],"component":"tripleo-heat-templates","cve_ids":["CVE-2021-4180"],"ecosystem":"PyPI","epss":0.0077,"exploited":false,"fixed_versions":["11.6.1"],"ghsa_id":"GHSA-hm3x-jwwf-jpr9","id":"tcs_01M5KFM00SEKBXD3K8WP17M2GS","modified_at":"2026-07-06T08:11:33.007972812Z","published_at":"2022-03-24T00:00:17Z","references":["https://osv.dev/vulnerability/GHSA-hm3x-jwwf-jpr9","https://nvd.nist.gov/vuln/detail/CVE-2021-4180","https://github.com/openstack/tripleo-heat-templates/commit/160936df134a471cfd245bd60964046027a571ea","https://github.com/openstack/tripleo-heat-templates/commit/2b9461e97fc5c4ceb0848d1cc4484f656bb85515","https://bugs.launchpad.net/tripleo/+bug/1955397","https://bugzilla.redhat.com/show_bug.cgi?id=2035793","https://github.com/openstack/tripleo-heat-templates"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-hm3x-jwwf-jpr9","url":"https://osv.dev/vulnerability/GHSA-hm3x-jwwf-jpr9"}],"summary":"Exposure of Sensitive Information to an Unauthorized Actor in OpenStack tripleo-heat-templates"}