| Package | Affected versions | Patched versions |
|---|---|---|
| ironic | ≥ 17.0.0, < 26.1.7≥ 27.0.0, < 29.0.6≥ 30.0.0, < 32.0.2≥ 33.0.0, < 35.0.2 | 26.1.729.0.632.0.235.0.2 |
In OpenStack Ironic before 35.0.2 (in a certain non-default configuration), instance_info['ks_template'] is rendered without sandboxing.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free