{"action":"Upgrade nova to 14.0.10 or later.","affected":[{"fixed":"16.0.3","introduced":"16.0.0"},{"fixed":"15.0.8","introduced":"15.0.0"},{"fixed":"14.0.10","introduced":"14.0.0"}],"component":"nova","cve_ids":["CVE-2017-16239"],"ecosystem":"PyPI","epss":0.01421,"exploited":false,"fixed_versions":["16.0.3","15.0.8","14.0.10"],"ghsa_id":"GHSA-w2wf-cgwh-vpqg","id":"tcs_01M5KG18N1P4DJBNC77ZFGD31J","modified_at":"2026-07-06T08:11:38.073499563Z","published_at":"2022-05-13T01:44:04Z","references":["https://osv.dev/vulnerability/GHSA-w2wf-cgwh-vpqg","https://nvd.nist.gov/vuln/detail/CVE-2017-16239","https://github.com/openstack/nova/commit/698b261a5a2a6c0f31ef5059046ef7196d5cba30","https://github.com/openstack/nova/commit/984dd8ad6add4523d93c7ce5a666a32233e02e34","https://github.com/openstack/nova/commit/9e2d63da94db63d97bd02e373bfc53d95808b833","https://github.com/openstack/nova/commit/b72105c1c49fcddc94992af63fc2f8078023491a","https://access.redhat.com/errata/RHSA-2018:0241","https://access.redhat.com/errata/RHSA-2018:0314","https://access.redhat.com/errata/RHSA-2018:0369","https://github.com/openstack/nova","https://launchpad.net/bugs/1664931","https://security.openstack.org/ossa/OSSA-2017-005.html","https://www.debian.org/security/2017/dsa-4056","http://www.securityfocus.com/bid/101950"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-w2wf-cgwh-vpqg","url":"https://osv.dev/vulnerability/GHSA-w2wf-cgwh-vpqg"}],"summary":"OpenStack Nova Filter Scheduler Bypass"}