{"action":"Upgrade cinder to 7.0.0a0 or later.","affected":[{"fixed":"7.0.0a0","introduced":"0"}],"component":"cinder","cve_ids":["CVE-2013-4202"],"ecosystem":"PyPI","epss":0.02626,"exploited":false,"fixed_versions":["7.0.0a0"],"ghsa_id":"GHSA-mfg4-9xf4-f45q","id":"tcs_01M5KHDJQNKR4D4NP0F2ZAS3GP","modified_at":"2026-07-07T11:45:43.151596166Z","published_at":"2026-07-06T08:03:22.754453Z","references":["https://osv.dev/vulnerability/PYSEC-2026-790","https://nvd.nist.gov/vuln/detail/CVE-2013-4202","https://bugs.launchpad.net/ossa/+bug/1190229","https://github.com/openstack/cinder","http://github.com/openstack/cinder/commit/2023eecc4b1a35daf42a64fa01967ed12c7d017b","http://github.com/openstack/cinder/commit/4ad95dba4fccbbc0df923dea0dc9e5c3ac9f4cc2","http://rhn.redhat.com/errata/RHSA-2013-1198.html","http://www.ubuntu.com/usn/USN-2005-1","https://pypi.org/project/cinder","https://github.com/advisories/GHSA-mfg4-9xf4-f45q"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2026-790","url":"https://osv.dev/vulnerability/PYSEC-2026-790"}],"summary":"OpenStack Cinder Denial of Service using XML entities"}