{"action":"Upgrade octavia to 2.0.3 or later.","affected":[{"fixed":"2.0.3","introduced":"0"},{"fixed":"3.0.2","introduced":"3.0.0"}],"component":"octavia","cve_ids":["CVE-2018-16856"],"ecosystem":"PyPI","epss":0.00885,"exploited":false,"fixed_versions":["3.0.2","2.0.3"],"ghsa_id":"GHSA-qcj3-h27m-mp9x","id":"tcs_01M5KG8WHN7HR8RM1028XQQ7MY","modified_at":"2026-06-10T17:02:26.766512501Z","published_at":"2019-03-26T18:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2019-193","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16856","https://github.com/advisories/GHSA-qcj3-h27m-mp9x"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2019-193","url":"https://osv.dev/vulnerability/PYSEC-2019-193"}],"summary":"In a default Red Hat Openstack Platform Director installation, openstack-octavia before versions openstack-octavia 2.0.2-5 and openstack-octavia-3.0.1-0.20181009115732 creates log files that are reada"}