{"action":"Upgrade horizon to 9.1.2 or later.","affected":[{"fixed":"9.1.2","introduced":"9.0"},{"fixed":"10.0.3","introduced":"10.0"},{"fixed":"11.0.1","introduced":"11.0.0"}],"component":"horizon","cve_ids":["CVE-2017-7400"],"ecosystem":"PyPI","epss":0.01063,"exploited":false,"fixed_versions":["9.1.2","10.0.3","11.0.1"],"ghsa_id":"GHSA-47vp-44v9-rhgq","id":"tcs_01M5KHDRWPJ9HXSHPMTXT9FVCP","modified_at":"2026-07-07T11:46:03.571983814Z","published_at":"2026-07-06T08:03:24.141443Z","references":["https://osv.dev/vulnerability/PYSEC-2026-821","https://nvd.nist.gov/vuln/detail/CVE-2017-7400","https://access.redhat.com/errata/RHSA-2017:1598","https://access.redhat.com/errata/RHSA-2017:1739","https://launchpad.net/bugs/1667086","https://opendev.org/openstack/horizon/commit/1407cfe53144146b29679de21f28c952282043ae","https://opendev.org/openstack/horizon/commit/511b325b45b6bd7a88bb6df1a4639b80d0121277","https://opendev.org/openstack/horizon/commit/a835dbfbaa2c70329c08d4b8429d49315dc6d651","https://opendev.org/openstack/horizon/commit/ce80bb6fec3cb0262728e7ae8b9d695cf832e5bf","http://www.securityfocus.com/bid/97324","https://pypi.org/project/horizon","https://github.com/advisories/GHSA-47vp-44v9-rhgq"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-821","url":"https://osv.dev/vulnerability/PYSEC-2026-821"}],"summary":"OpenStack Horizon Cross-site Scripting (XSS)"}