nova vulnerabilities
CVEs whose affected-version data names the nova package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
39 CVEsRSS
CVE-2016-2140Medium· 5.3OpenStack Nova host data access through resize/migration
OpenStack Nova host data access through resize/migration
CVE-2014-3708MediumOpenStack Compute (Nova) Denial of Service vulnerability
OpenStack Compute (Nova) Denial of Service vulnerability
CVE-2015-3241MediumOpenStack Nova instance migration process does not stop when instance is deleted
OpenStack Nova instance migration process does not stop when instance is deleted
CVE-2017-16239Medium· 6.5OpenStack Nova Filter Scheduler Bypass
OpenStack Nova Filter Scheduler Bypass
CVE-2017-17051High· 8.6OpenStack Nova DoS by rebuilding the same instance with a new image multiple times
OpenStack Nova DoS by rebuilding the same instance with a new image multiple times
CVE-2017-18191High· 7.5OpenStack Nova Denial of service attack on the compute host
OpenStack Nova Denial of service attack on the compute host
CVE-2011-4076Medium· 5.9OpenStack Nova Exposure of Sensitive Information to an Unauthorized Actor
OpenStack Nova Exposure of Sensitive Information to an Unauthorized Actor
CVE-2011-3147Low· 2.8Openstack nova qcow format could expose host filesystem information
Openstack nova qcow format could expose host filesystem information
CVE-2021-3654Medium· 6.1PoCOpen Redirect in CPython that affects users of OpenStack Nova
Open Redirect in CPython that affects users of OpenStack Nova