{"action":"Upgrade ironic-inspector to 5.0.2 or later.","affected":[{"fixed":"5.0.2","introduced":"0"},{"fixed":"6.0.3","introduced":"5.1.0"},{"fixed":"7.2.4","introduced":"6.1.0"},{"fixed":"8.0.3","introduced":"8.0.0"},{"fixed":"8.2.1","introduced":"8.1.0"}],"component":"ironic-inspector","cve_ids":["CVE-2019-10141"],"ecosystem":"PyPI","epss":0.02484,"exploited":false,"fixed_versions":["7.2.4","8.2.1","5.0.2","6.0.3","8.0.3"],"ghsa_id":"GHSA-c7fc-cm7p-92r2","id":"tcs_01M5KG8MH2VP8QZV0GA09QXZTH","modified_at":"2026-06-10T17:01:52.618778043Z","published_at":"2019-07-30T17:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2019-152","https://docs.openstack.org/releasenotes/ironic-inspector/ocata.html#relnotes-5-0-2-7-origin-stable-ocata","https://docs.openstack.org/releasenotes/ironic-inspector/stein.html#relnotes-8-2-1-stable-stein","https://docs.openstack.org/releasenotes/ironic-inspector/queens.html#relnotes-7-2-4-stable-queens","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10141","https://docs.openstack.org/releasenotes/ironic-inspector/rocky.html#relnotes-8-0-3-stable-rocky","https://docs.openstack.org/releasenotes/ironic-inspector/pike.html#relnotes-6-0-3-4-stable-pike","https://access.redhat.com/errata/RHSA-2019:2505","https://github.com/advisories/GHSA-c7fc-cm7p-92r2"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2019-152","url":"https://osv.dev/vulnerability/PYSEC-2019-152"}],"summary":"A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's node_cache."}