{"action":"Upgrade mistral to 7.0.4 or later.","affected":[{"fixed":"7.0.4","introduced":"0"}],"component":"mistral","cve_ids":["CVE-2018-16848"],"ecosystem":"PyPI","epss":0.01176,"exploited":false,"fixed_versions":["7.0.4"],"ghsa_id":"GHSA-443j-6p7g-6v4w","id":"tcs_01M5KG9ZRFX4YQWPBE1PCTT9J5","modified_at":"2026-06-10T17:02:16.283961831Z","published_at":"2020-06-15T15:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-240","https://bugzilla.redhat.com/show_bug.cgi?id=1645332","https://bugs.launchpad.net/mistral/+bug/1785657","https://github.com/advisories/GHSA-443j-6p7g-6v4w"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"PYSEC-2020-240","url":"https://osv.dev/vulnerability/PYSEC-2020-240"},{"source":"nvd","source_id":"CVE-2018-16848","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16848"}],"summary":"A Denial of Service (DoS) condition is possible in OpenStack Mistral in versions up to and including 7.0.3. Submitting a specially crafted workflow definition YAML file containing nested anchors can l"}