{"action":"Upgrade neutron to 11.0.7 or later.","affected":[{"fixed":"11.0.7","introduced":"0"},{"fixed":"12.0.6","introduced":"12.0.0"},{"fixed":"13.0.3","introduced":"13.0.0"}],"component":"neutron","cve_ids":["CVE-2019-10876"],"ecosystem":"PyPI","epss":0.01725,"exploited":false,"fixed_versions":["12.0.6","11.0.7","13.0.3"],"ghsa_id":"GHSA-jr9m-v5qh-mh2j","id":"tcs_01M5KG8VR9VAVX1BEQSA6D75NQ","modified_at":"2026-06-10T17:02:23.691854723Z","published_at":"2019-04-05T05:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2019-189","https://review.openstack.org/#/q/topic:bug/1813007","https://bugs.launchpad.net/ossa/+bug/1813007","https://security.openstack.org/ossa/OSSA-2019-002.html","http://www.openwall.com/lists/oss-security/2019/04/09/2","https://access.redhat.com/errata/RHSA-2019:0935","https://access.redhat.com/errata/RHSA-2019:0879","https://github.com/advisories/GHSA-jr9m-v5qh-mh2j"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2019-189","url":"https://osv.dev/vulnerability/PYSEC-2019-189"}],"summary":"An issue was discovered in OpenStack Neutron 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By creating two security groups with separate/overlapping port ranges, an authenticated use"}