{"action":"Upgrade storlets to 13.0.0.0rc1 or later.","affected":[{"fixed":"13.0.0.0rc1","introduced":"0"}],"component":"storlets","cve_ids":["CVE-2024-28717"],"ecosystem":"PyPI","epss":0.00892,"exploited":false,"fixed_versions":["13.0.0.0rc1"],"ghsa_id":"GHSA-rfm2-f94j-qhjp","id":"tcs_01M5KGWKPAC4D9VR6KCKJGKKAV","modified_at":"2026-07-07T17:48:12.644704170Z","published_at":"2026-07-07T11:45:39.992080Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1945","https://nvd.nist.gov/vuln/detail/CVE-2024-28717","https://github.com/openstack/storlets/commit/5ad58804af885db3eb7a78bea5000c401eeeb70e","https://bugs.launchpad.net/storlets/+bug/2047723","https://gist.github.com/Fewword/f098d8d6375ac25e27b18c0e57be532f","https://github.com/openstack/storlets","https://pypi.org/project/storlets","https://github.com/advisories/GHSA-rfm2-f94j-qhjp"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-1945","url":"https://osv.dev/vulnerability/PYSEC-2026-1945"}],"summary":"OpenStack Storlets arbitrary code execution vulnerability"}