{"action":"Upgrade magnum to 14.1.2 or later.","affected":[{"fixed":"14.1.2","introduced":"0"},{"fixed":"17.0.2","introduced":"17.0.0.0rc1"},{"fixed":"16.0.2","introduced":"16.0.0.0rc1"},{"fixed":"15.0.2","introduced":"15.0.0.0rc1"}],"component":"magnum","cve_ids":["CVE-2024-28718"],"ecosystem":"PyPI","epss":0.01063,"exploited":false,"fixed_versions":["14.1.2","17.0.2","16.0.2","15.0.2"],"ghsa_id":"GHSA-jx7x-9r98-h5xr","id":"tcs_01M5KFPT5SCDST014QE8SNP3F8","modified_at":"2026-07-07T17:56:29.559257438Z","published_at":"2024-04-12T15:37:19Z","references":["https://osv.dev/vulnerability/GHSA-jx7x-9r98-h5xr","https://nvd.nist.gov/vuln/detail/CVE-2024-28718","https://github.com/openstack/magnum/commit/272fd686d8c8bf5954e9e7d3bc991ff27e46184d","https://github.com/openstack/magnum/commit/312aa6a86ac8e62f6ed4f1e9473fdabbbb7a4b1e","https://github.com/openstack/magnum/commit/883b40b5b0ecfc5f78758143c0d3c754458f12b7","https://github.com/openstack/magnum/commit/e79907c521149872c1b495355a3a7b3a0c7e3479","https://bugs.launchpad.net/magnum/+bug/2047690","https://gist.github.com/Fewword/f098d8d6375ac25e27b18c0e57be532f","https://github.com/openstack/magnum","https://review.opendev.org/c/openstack/magnum/+/907305"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-jx7x-9r98-h5xr","url":"https://osv.dev/vulnerability/GHSA-jx7x-9r98-h5xr"}],"summary":"OpenStack magnum vulnerable to time-of-check to time-of-use (TOCTOU) attack"}