{"action":"Upgrade cinder to 19.1.2 or later.","affected":[{"fixed":"19.1.2","introduced":"0"},{"fixed":"20.0.2","introduced":"20.0.0"}],"component":"cinder","cve_ids":["CVE-2022-47951"],"ecosystem":"PyPI","epss":0.01034,"exploited":false,"fixed_versions":["19.1.2","20.0.2"],"ghsa_id":"GHSA-7h75-hwxx-qpgc","id":"tcs_01M5KGZAB8G7NX427NE3R7CVRG","modified_at":"2026-07-13T16:43:47.432798810Z","published_at":"2026-07-13T14:19:56.761789Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2411","https://nvd.nist.gov/vuln/detail/CVE-2022-47951","https://launchpad.net/bugs/1996188","https://lists.debian.org/debian-lts-announce/2023/01/msg00040.html","https://lists.debian.org/debian-lts-announce/2023/01/msg00041.html","https://lists.debian.org/debian-lts-announce/2023/01/msg00042.html","https://security.openstack.org/ossa/OSSA-2023-002.html","https://www.debian.org/security/2023/dsa-5336","https://www.debian.org/security/2023/dsa-5337","https://www.debian.org/security/2023/dsa-5338","https://pypi.org/project/cinder","https://github.com/advisories/GHSA-7h75-hwxx-qpgc"],"severity":{"label":"medium","score":5.7},"sources":[{"source":"osv","source_id":"PYSEC-2026-2411","url":"https://osv.dev/vulnerability/PYSEC-2026-2411"}],"summary":"OpenStack Cinder, glance, and Nova vulnerable to Path Traversal"}