Suggestions search

All statuses

Filter by:

With package: h5glance

Found 2 matching suggestions

View:

Compact

Detailed

Untriaged

Permalink CVE-2026-77648

2.2 LOW

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): High (H)
Privileges Required (PR): High (H)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): None (N)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

created 4 days ago Activity log

Created suggestion 4 days ago

In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import …

In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import_filtering_opts, allowing an admin to fetch internal URLs from the Glance service network (aka SSRF), as long as https:// or http:// is used. This API has been available only to admins since Xena, and it has been deprecated for several releases.

References

Affected products

Glance

==32.0.0
<31.1.1
<30.3.0

Matching in nixpkgs

pkgs.glance

Self-hosted dashboard that puts all your feeds in one place

nixos-unstable 0.8.5
- nixpkgs-unstable 0.8.5
- nixos-unstable-small 0.8.5
nixos-26.05 0.8.5
- nixos-26.05-small 0.8.5
- nixpkgs-26.05-darwin 0.8.5

pkgs.glances

Cross-platform curses-based monitoring tool

nixos-unstable 4.5.5
- nixpkgs-unstable 4.5.5
- nixos-unstable-small 4.5.6
nixos-26.05 4.5.5
- nixos-26.05-small 4.5.5
- nixpkgs-26.05-darwin 4.5.5

pkgs.h5glance

Explore HDF5 files in terminal & HTML views

nixos-unstable 0.9
- nixpkgs-unstable 0.9
- nixos-unstable-small 0.9
nixos-26.05 0.9
- nixos-26.05-small 0.9
- nixpkgs-26.05-darwin 0.9

pkgs.glanceclient

Python bindings for the OpenStack Images API

nixos-unstable 4.11.0
- nixpkgs-unstable 4.11.0
- nixos-unstable-small 4.11.0
nixos-26.05 4.11.0
- nixos-26.05-small 4.11.0
- nixpkgs-26.05-darwin 4.11.0

pkgs.python313Packages.glances-api

Python API for interacting with Glances

nixos-unstable 0.10.0
- nixpkgs-unstable 0.10.0
- nixos-unstable-small 0.10.0
nixos-26.05 0.10.0
- nixos-26.05-small 0.10.0
- nixpkgs-26.05-darwin 0.10.0

pkgs.python314Packages.glances-api

Python API for interacting with Glances

nixos-unstable 0.10.0
- nixpkgs-unstable 0.10.0
- nixos-unstable-small 0.10.0
nixos-26.05 0.10.0
- nixos-26.05-small 0.10.0
- nixpkgs-26.05-darwin 0.10.0

pkgs.python313Packages.python-glanceclient

Python bindings for the OpenStack Images API

nixos-unstable 4.11.0
- nixpkgs-unstable 4.11.0
- nixos-unstable-small 4.11.0
nixos-26.05 4.11.0
- nixos-26.05-small 4.11.0
- nixpkgs-26.05-darwin 4.11.0

pkgs.python314Packages.python-glanceclient

Python bindings for the OpenStack Images API

nixos-unstable 4.11.0
- nixpkgs-unstable 4.11.0
- nixos-unstable-small 4.11.0
nixos-26.05 4.11.0
- nixos-26.05-small 4.11.0
- nixpkgs-26.05-darwin 4.11.0

Package maintainers

@Defelo Defelo
@dvn0 Devan Carpenter <devan@informatics.coop>
@SuperSandro2000 Sandro Jäckel <sandro.jaeckel@gmail.com>
@anthonyroussel Anthony Roussel <anthony@roussel.dev>
@vinetos vinetos <contact+git@vinetos.fr>
@MiniHarinn Harinn <prinn.dev@pm.me>
@k0ral Koral <koral@mailoo.org>
@doronbehar Doron Behar <me@doronbehar.com>
@fabaff Fabian Affolter <mail@fabian-affolter.ch>

Dismissed

(not in Nixpkgs)

Permalink CVE-2026-34881

5.0 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): None (N)
Integrity (I): Low (L)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): Low (L)
Modified Availability (MA): None (N)

updated 4 months, 3 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 3 weeks ago
@LeSuisse dismissed (not in Nixpkgs) 4 months, 3 weeks ago

OpenStack Glance <29.1.1, >=30.0.0 <30.1.1, ==31.0.0 is affected by Server-Side …

OpenStack Glance <29.1.1, >=30.0.0 <30.1.1, ==31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only glance image import functionality is affected. In particular, the web-download and glance-download import methods are subject to this vulnerability, as is the optional (not enabled by default) ovf_process image import plugin.