https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:11:51.492474+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2013-4278 CVE-2013-4278 2026-10-03T10:11:51.493921+00:00

The "create an instance" API in OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to boot arbitrary flavors by guessing the flavor id. NOTE: this issue is due to an incomplete fix for CVE-2013-2256.

 https://cve.radiocsirt.org/vuln/ghsa-43cm-73px-5v4m GHSA-43cm-73px-5v4m — OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors 2026-10-03T10:11:51.493978+00:00

Affected: PyPI: nova

The "create an instance" API in OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly enforce the os-flavor-access:is_public property, which allows remote authenticated users to boot arbitrary flavors by guessing the flavor id. NOTE: this issue is due to an incomplete fix for CVE-2013-2256.