{"action":"Upgrade python-glanceclient to 0.10.0 or later.","affected":[{"fixed":"0.10.0","introduced":"0"}],"component":"python-glanceclient","cve_ids":["CVE-2013-4111"],"ecosystem":"PyPI","epss":0.00994,"exploited":false,"fixed_versions":["0.10.0"],"ghsa_id":"GHSA-qgfg-gvff-523v","id":"tcs_01M5KG5QBMH222SP8C0DC6E125","modified_at":"2026-06-10T17:01:46.953857963Z","published_at":"2013-08-28T21:55:00Z","references":["https://osv.dev/vulnerability/PYSEC-2013-11","http://secunia.com/advisories/54525","https://github.com/openstack/python-glanceclient/blob/master/doc/source/index.rst","http://secunia.com/advisories/54313","https://bugs.launchpad.net/ossa/+bug/1192229","http://lists.opensuse.org/opensuse-updates/2013-08/msg00019.html","http://rhn.redhat.com/errata/RHSA-2013-1200.html","http://www.ubuntu.com/usn/USN-2004-1","https://github.com/advisories/GHSA-qgfg-gvff-523v"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2013-11","url":"https://osv.dev/vulnerability/PYSEC-2013-11"}],"summary":"The Python client library for Glance (python-glanceclient) before 0.10.0 does not properly check the preverify_ok value, which prevents the server hostname from being verified with a domain name in th"}