{"action":"Upgrade nova to 14.0.10 or later.","affected":[{"fixed":"14.0.10","introduced":"14.0.0"},{"fixed":"15.0.8","introduced":"15.0.0"},{"fixed":"16.0.3","introduced":"16.0.0"}],"component":"nova","cve_ids":["CVE-2017-16239"],"ecosystem":"PyPI","epss":0.01421,"exploited":false,"fixed_versions":["14.0.10","15.0.8","16.0.3"],"ghsa_id":"GHSA-w2wf-cgwh-vpqg","id":"tcs_01M5KHCYPZQY91PK56ACCVS715","modified_at":"2026-07-06T08:00:47.883144579Z","published_at":"2026-07-02T14:13:24.507335Z","references":["https://osv.dev/vulnerability/PYSEC-2026-694","https://nvd.nist.gov/vuln/detail/CVE-2017-16239","https://github.com/openstack/nova/commit/698b261a5a2a6c0f31ef5059046ef7196d5cba30","https://github.com/openstack/nova/commit/984dd8ad6add4523d93c7ce5a666a32233e02e34","https://github.com/openstack/nova/commit/9e2d63da94db63d97bd02e373bfc53d95808b833","https://github.com/openstack/nova/commit/b72105c1c49fcddc94992af63fc2f8078023491a","https://access.redhat.com/errata/RHSA-2018:0241","https://access.redhat.com/errata/RHSA-2018:0314","https://access.redhat.com/errata/RHSA-2018:0369","https://github.com/openstack/nova","https://launchpad.net/bugs/1664931","https://security.openstack.org/ossa/OSSA-2017-005.html","https://www.debian.org/security/2017/dsa-4056","http://www.securityfocus.com/bid/101950","https://pypi.org/project/nova","https://github.com/advisories/GHSA-w2wf-cgwh-vpqg"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-694","url":"https://osv.dev/vulnerability/PYSEC-2026-694"}],"summary":"OpenStack Nova Filter Scheduler Bypass"}