{"action":"Upgrade glance to 23.0.1 or later.","affected":[{"fixed":"23.0.1","introduced":"0"},{"fixed":"24.1.1","introduced":"24.0.0"}],"component":"glance","cve_ids":["CVE-2022-47951"],"ecosystem":"PyPI","epss":0.01034,"exploited":false,"fixed_versions":["23.0.1","24.1.1"],"ghsa_id":"GHSA-7h75-hwxx-qpgc","id":"tcs_01M5KGZSVEYEASSSDKS6RMBWJY","modified_at":"2026-07-13T16:43:47.432798810Z","published_at":"2026-07-13T14:19:56.933094Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2490","https://nvd.nist.gov/vuln/detail/CVE-2022-47951","https://launchpad.net/bugs/1996188","https://lists.debian.org/debian-lts-announce/2023/01/msg00040.html","https://lists.debian.org/debian-lts-announce/2023/01/msg00041.html","https://lists.debian.org/debian-lts-announce/2023/01/msg00042.html","https://security.openstack.org/ossa/OSSA-2023-002.html","https://www.debian.org/security/2023/dsa-5336","https://www.debian.org/security/2023/dsa-5337","https://www.debian.org/security/2023/dsa-5338","https://pypi.org/project/glance","https://github.com/advisories/GHSA-7h75-hwxx-qpgc"],"severity":{"label":"medium","score":5.7},"sources":[{"source":"osv","source_id":"PYSEC-2026-2490","url":"https://osv.dev/vulnerability/PYSEC-2026-2490"}],"summary":"OpenStack Cinder, glance, and Nova vulnerable to Path Traversal"}