Threats affecting pkg:pypi/openstack-horizon

CVE-2026-43002 is a medium severity vulnerability in OpenStack Horizon versions 25.6.0 and 25.7 before 25.7.3. It involves a write operation to session storage before user authentication, which can lead to exhaustion of storage resources by unauthenticated requests. This issue is a regression of a previous fix (CVE-2014-8124). No known exploits are reported in the wild, and no official patch or remediation guidance is currently available.