https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:21:07.238082+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-107406 EUVD-2026-107406 2026-10-03T12:21:07.323913+00:00 EUVD-2026-107406 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4278 fkie_cve-2013-4278 2026-10-03T12:21:07.323954+00:00

The "create an instance" API in OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to boot arbitrary flavors by guessing the flavor id. NOTE: this issue is due to an incomplete fix for CVE-2013-2256.

 https://cve.radiocsirt.org/vuln/ghsa-43cm-73px-5v4m GHSA-43cm-73px-5v4m — OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors 2026-10-03T12:21:07.323989+00:00

Affected: PyPI: nova

The "create an instance" API in OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to boot arbitrary flavors by guessing the flavor id. NOTE: this issue is due to an incomplete fix for CVE-2013-2256.

 https://cve.radiocsirt.org/vuln/gsd-2013-4278 gsd-2013-4278 2026-10-03T12:21:07.324015+00:00 gsd-2013-4278 https://cve.radiocsirt.org/vuln/pysec-2026-862 PYSEC-2026-862 — OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors 2026-10-03T12:21:07.324027+00:00

Affected: PyPI: nova

The "create an instance" API in OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to boot arbitrary flavors by guessing the flavor id. NOTE: this issue is due to an incomplete fix for CVE-2013-2256.