{"action":"Upgrade tripleo-heat-templates to 0.8.7 or later.","affected":[{"fixed":"0.8.7","introduced":"0"}],"component":"tripleo-heat-templates","cve_ids":["CVE-2015-5271"],"ecosystem":"PyPI","epss":0.02482,"exploited":false,"fixed_versions":["0.8.7"],"ghsa_id":"GHSA-8936-44gw-7664","id":"tcs_01M5KG6XB5NYSG9P4PMED5EM7T","modified_at":"2026-06-10T17:02:45.929767409Z","published_at":"2016-04-15T17:59:00Z","references":["https://osv.dev/vulnerability/PYSEC-2016-34","https://access.redhat.com/errata/RHSA-2015:1862","https://bugs.launchpad.net/tripleo/+bug/1494896","https://bugzilla.redhat.com/show_bug.cgi?id=1261697","https://launchpadlibrarian.net/217268516/CVE-2015-5271_puppet-swift.patch","https://github.com/advisories/GHSA-8936-44gw-7664"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2016-34","url":"https://osv.dev/vulnerability/PYSEC-2016-34"},{"source":"nvd","source_id":"CVE-2015-5271","url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5271"}],"summary":"The TripleO Heat templates (tripleo-heat-templates) do not properly order the Identity Service (keystone) before the OpenStack Object Storage (Swift) staticweb middleware in the swiftproxy pipeline wh"}