{"action":"Upgrade tripleo-heat-templates to 7.0.6 or later.","affected":[{"fixed":"7.0.6","introduced":"0"}],"component":"tripleo-heat-templates","cve_ids":["CVE-2017-12155"],"ecosystem":"PyPI","epss":0.00287,"exploited":false,"fixed_versions":["7.0.6"],"ghsa_id":"GHSA-w8gx-hhcx-px6w","id":"tcs_01M5KHDB5V1CJD2Z4TPH0XDVY7","modified_at":"2026-07-06T08:00:52.801467491Z","published_at":"2026-07-02T14:13:24.276345Z","references":["https://osv.dev/vulnerability/PYSEC-2026-754","https://nvd.nist.gov/vuln/detail/CVE-2017-12155","https://access.redhat.com/errata/RHSA-2018:0602","https://access.redhat.com/errata/RHSA-2018:1593","https://access.redhat.com/errata/RHSA-2018:1627","https://bugs.launchpad.net/tripleo/+bug/1720787","https://bugzilla.redhat.com/show_bug.cgi?id=1489360","https://github.com/openstack/tripleo-heat-templates","https://opendev.org/openstack/tripleo-heat-templates/commit/a18fd59077d97de83496c85c017b9d256a3eddd4","https://opendev.org/openstack/tripleo-heat-templates/commit/ce7b65f443d38a6627631f53cb22336338e97d30","https://pypi.org/project/tripleo-heat-templates","https://github.com/advisories/GHSA-w8gx-hhcx-px6w"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"PYSEC-2026-754","url":"https://osv.dev/vulnerability/PYSEC-2026-754"}],"summary":"Openstack tripleo-heat-templates unauthenticated file access"}