{"action":"Upgrade nova to 13.1.4 or later.","affected":[{"fixed":"13.1.4","introduced":"13.0.0"},{"fixed":"14.0.5","introduced":"14.0.0"},{"fixed":"15.0.2","introduced":"15.0.1"}],"component":"nova","cve_ids":["CVE-2017-7214"],"ecosystem":"PyPI","epss":0.02302,"exploited":false,"fixed_versions":["13.1.4","14.0.5","15.0.2"],"ghsa_id":"GHSA-f4g4-cj8f-3cr9","id":"tcs_01M5KHBAAM4M7WPSQDTXY73S7V","modified_at":"2026-07-02T13:00:05.009759713Z","published_at":"2026-06-29T11:50:32.179235Z","references":["https://osv.dev/vulnerability/PYSEC-2026-432","https://nvd.nist.gov/vuln/detail/CVE-2017-7214","https://github.com/openstack/nova/commit/3f985f1eda6f29180878a3d21c20c5057179486a","https://github.com/openstack/nova/commit/acb19160d4d348e29a21ad57c61c7369352c4d1c","https://github.com/openstack/nova/commit/c2c91ce44592fc5dc2aacee1cf7f5b5cfd2e9a0a","https://github.com/openstack/nova/commit/e193201fa1de5b08b29adefd8c149935c5529598","https://access.redhat.com/errata/RHSA-2017:1508","https://access.redhat.com/errata/RHSA-2017:1595","https://github.com/openstack/nova","https://launchpad.net/bugs/1673569","http://www.securityfocus.com/bid/96998","https://pypi.org/project/nova","https://github.com/advisories/GHSA-f4g4-cj8f-3cr9"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-432","url":"https://osv.dev/vulnerability/PYSEC-2026-432"}],"summary":"OpenStack Nova logs sensitive context from notification exceptions"}