Threats affecting pkg:pypi/openstack-ironic

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.0	EPSS 0.3%	CVE-2026-89419OpenStack Ironic · Improper Protection of Alternate Path Medium5.0EPSS 0.3%2026-10-23CVE Database V5CVE-2026-89419 OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/{ident} - in other words, not using the specific maintenance endpoint. EPSS 0.3%Vulnerability CWE-424	CVE Database V5	2026-10-23
Medium	4.3	EPSS 0.2%	CVE-2026-115638OpenStack Ironic · Data Amplification Medium4.3EPSS 0.2%2026-10-23CVE Database V5CVE-2026-115638 OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb. EPSS 0.2%Vulnerability CWE-409	CVE Database V5	2026-10-23

Page 1 of 1