{"action":"Upgrade cinder to 2014.1.3 or later.","affected":[{"fixed":"2014.1.3","introduced":"0"}],"component":"cinder","cve_ids":["CVE-2014-3641"],"ecosystem":"PyPI","epss":0.01875,"exploited":false,"fixed_versions":["2014.1.3"],"ghsa_id":"GHSA-qhch-g8qr-p497","id":"tcs_01M5KHDJWRVHDRXQVP3ZCBQ1TA","modified_at":"2026-07-20T13:30:09.533465173Z","published_at":"2026-07-06T08:03:25.782288Z","references":["https://osv.dev/vulnerability/PYSEC-2026-791","https://nvd.nist.gov/vuln/detail/CVE-2014-3641","https://access.redhat.com/errata/RHSA-2014:1787","https://access.redhat.com/errata/RHSA-2014:1788","https://access.redhat.com/security/cve/CVE-2014-3641","https://bugs.launchpad.net/cinder/+bug/1350504","https://bugzilla.redhat.com/show_bug.cgi?id=1141996","https://opendev.org/openstack/cinder","https://web.archive.org/web/20200228053848/http://www.securityfocus.com/bid/70221","http://rhn.redhat.com/errata/RHSA-2014-1787.html","http://rhn.redhat.com/errata/RHSA-2014-1788.html","http://seclists.org/oss-sec/2014/q4/78","http://www.ubuntu.com/usn/USN-2405-1","https://pypi.org/project/cinder","https://github.com/advisories/GHSA-qhch-g8qr-p497"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2026-791","url":"https://osv.dev/vulnerability/PYSEC-2026-791"}],"summary":"OpenStack Cinder Exposure of Sensitive Information to an Unauthorized Actor vulnerability"}