Security
فارسی
All products

ironic

PyPI · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume propertiesCVE-2026-54421 · GHSA-J4CW-MCG2-2Q78Version ranges need review. ironicRed Hat OpenShift Container Platform 4/openstack-ironic PyPIRed Hat Medium Fix reported
OpenStack Ironic is Vulnerable to Inclusion of Functionality from Untrusted Control SphereCVE-2026-42510 · GHSA-WQPV-C3PP-3M58Version ranges need review. ironicRed Hat OpenShift Container Platform 4/openstack-ironic PyPIRed Hat Medium Fix reported
OpenStack Ironic: Crafted JSON String to Certain Endpoints on the API or JSON-RPC Service May Result in Service CrashCVE-2026-50589 · GHSA-Q3G8-RJRX-59PHVersion ranges need review. ironic PyPI Medium Fix reported
OpenStack Ironic: Pre-Validation Checksum Calculation allows Denial of Service (DoS) via Infinite Block DevicesCVE-2026-44919 · GHSA-4G73-W726-53H3Version ranges need review. ironic PyPI Medium No fix reported
OpenStack Ironic allows file overwrite via directory traversal during deployment with a crafted ISO imageCVE-2026-48681 · GHSA-9V62-QX4C-44X5Version ranges need review. ironicRed Hat OpenShift Container Platform 4/openstack-ironic PyPIRed Hat Medium Fix reported
OpenStack Ironic allows Boot Script InjectionCVE-2026-46447 · GHSA-JRH2-F5JC-XPGRVersion ranges need review. ironicRed Hat OpenShift Container Platform 4/openstack-ironic PyPIRed Hat Medium Fix reported
OpenStack Ironic fails to verify checksums of supplied image_source URLsCVE-2024-47211 · GHSA-8H22-6QWX-Q4W9Version ranges need review. ironic PyPI Medium Fix reported
OpenStack Ironic Exposure of Sensitive Information to an Unauthorized ActorCVE-2016-4985 · GHSA-F7CR-7C2C-FM8RVersion ranges need review. ironicRed Hat Enterprise Linux OpenStack Platform 6 (Juno)/openstack-ironic PyPIRed Hat High Fix reported
OpenStack Ironic fails to restrict paths used for file:// image URLsCVE-2025-44021 · GHSA-Q3M2-CRGQ-5P3QVersion ranges need review. ironicRed Hat OpenShift Container Platform 4/openstack-ironic PyPIRed Hat Low Fix reported