Most recent entries from all

EUVD-2026-107331

2026-10-04T09:15:54.726877+00:00

EUVD-2026-107331

fkie_cve-2013-4202

2026-10-04T09:15:54.726915+00:00

The (1) backup (api/contrib/backups.py) and (2) volume transfer (contrib/volume_transfer.py) APIs in OpenStack Cinder Grizzly 2013.1.3 and earlier allows remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack. NOTE: this issue is due to an incomplete fix for CVE-2013-1664.

GHSA-mfg4-9xf4-f45q — OpenStack Cinder Denial of Service using XML entities

2026-10-04T09:15:54.726949+00:00

Affected: PyPI: cinder

gsd-2013-4202

2026-10-04T09:15:54.726973+00:00

gsd-2013-4202

PYSEC-2026-790 — OpenStack Cinder Denial of Service using XML entities

2026-10-04T09:15:54.726986+00:00

Affected: PyPI: cinder

RHSA-2013:1198 — Red Hat Security Advisory: openstack-cinder security update

2026-10-04T09:15:54.727005+00:00

OpenStack: Cinder LVM volume driver does not support secure deletion OpenStack: Cinder Denial of Service using XML entities