{"action":"Upgrade neutron to 7.0.5 or later.","affected":[{"fixed":"7.0.5","introduced":"0"},{"fixed":"8.1.1","introduced":"8.0.0"}],"component":"neutron","cve_ids":["CVE-2015-8914"],"ecosystem":"PyPI","epss":0.04283,"exploited":false,"fixed_versions":["7.0.5","8.1.1"],"ghsa_id":"GHSA-3vj4-cvjp-482h","id":"tcs_01M5KHB8N598Z76FHCGBC1K17F","modified_at":"2026-07-02T13:00:05.030730414Z","published_at":"2026-06-29T11:50:32.602905Z","references":["https://osv.dev/vulnerability/PYSEC-2026-431","https://nvd.nist.gov/vuln/detail/CVE-2015-8914","https://access.redhat.com/errata/RHSA-2016:1473","https://access.redhat.com/errata/RHSA-2016:1474","https://bugs.launchpad.net/neutron/+bug/1502933","https://github.com/openstack/neutron","https://review.openstack.org/#/c/300233","https://review.openstack.org/#/c/310648","https://review.openstack.org/#/c/310652","https://security.openstack.org/ossa/OSSA-2016-009.html","http://www.openwall.com/lists/oss-security/2016/06/10/5","http://www.openwall.com/lists/oss-security/2016/06/10/6","https://pypi.org/project/neutron","https://github.com/advisories/GHSA-3vj4-cvjp-482h"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"PYSEC-2026-431","url":"https://osv.dev/vulnerability/PYSEC-2026-431"}],"summary":"OpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism"}