{"action":"Upgrade cinder to 7.0.0a0 or later.","affected":[{"fixed":"7.0.0a0","introduced":"0"}],"component":"cinder","cve_ids":["CVE-2013-4202"],"ecosystem":"PyPI","epss":0.02626,"exploited":false,"fixed_versions":["7.0.0a0"],"ghsa_id":"GHSA-mfg4-9xf4-f45q","id":"tcs_01M5KFQYR8EEJJRHWRR4WF8JDG","modified_at":"2026-07-07T11:56:15.311566114Z","published_at":"2022-05-14T01:58:45Z","references":["https://osv.dev/vulnerability/GHSA-mfg4-9xf4-f45q","https://nvd.nist.gov/vuln/detail/CVE-2013-4202","https://bugs.launchpad.net/ossa/+bug/1190229","https://github.com/openstack/cinder","http://github.com/openstack/cinder/commit/2023eecc4b1a35daf42a64fa01967ed12c7d017b","http://github.com/openstack/cinder/commit/4ad95dba4fccbbc0df923dea0dc9e5c3ac9f4cc2","http://rhn.redhat.com/errata/RHSA-2013-1198.html","http://www.ubuntu.com/usn/USN-2005-1"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-mfg4-9xf4-f45q","url":"https://osv.dev/vulnerability/GHSA-mfg4-9xf4-f45q"}],"summary":"OpenStack Cinder Denial of Service using XML entities"}