{"action":"Upgrade nova to 12.0.0a0 or later.","affected":[{"fixed":"12.0.0a0","introduced":"0"}],"component":"nova","cve_ids":["CVE-2013-4278"],"ecosystem":"PyPI","epss":0.01509,"exploited":false,"fixed_versions":["12.0.0a0"],"ghsa_id":"GHSA-43cm-73px-5v4m","id":"tcs_01M5KHE0TC1T708XJ7B715E431","modified_at":"2026-07-07T11:45:19.100930032Z","published_at":"2026-07-06T08:03:27.046130Z","references":["https://osv.dev/vulnerability/PYSEC-2026-862","https://nvd.nist.gov/vuln/detail/CVE-2013-4278","https://github.com/openstack/nova/commit/4054cc4a22a1fea997dec76afb5646fd6c6ea6b9","https://github.com/openstack/nova/commit/6825959560e06725d26625fd21f5c0b78b305492","https://github.com/openstack/nova/commit/8b686195afe7e6dfb46c56c1ef2fe9c993d8e495","https://bugs.launchpad.net/ossa/+bug/1212179","https://github.com/openstack/nova","http://lists.openstack.org/pipermail/openstack-announce/2013-August/000138.html","http://rhn.redhat.com/errata/RHSA-2013-1199.html","https://pypi.org/project/nova","https://github.com/advisories/GHSA-43cm-73px-5v4m"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2026-862","url":"https://osv.dev/vulnerability/PYSEC-2026-862"}],"summary":"OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors"}