Packages / Debian 12 (Bookworm) / Source / net / mistral
OpenStack Workflow service - API
OpenStack Workflow service - common files
OpenStack Workflow service - Engine
OpenStack Workflow service - Event Engine
OpenStack Workflow service - Executor
OpenStack Workflow Service - Python libraries
Matching against OpenFactory catalog package versions is in progress.
| CVE | Severity | Version impact |
|---|---|---|
| [CVE-2026-93860] Published: In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement. Any holder of a valid Mist | High(7.1) | AffectedDetails (24)
|
| [CVE-2026-93858] Published: In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to paramiko.ProxyCommand() before any SSH connection to a gateway or target host i | High(8.8) | AffectedDetails (24)
|
| [CVE-2026-97147] Published: In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object with a query that can return another project's resource, then write to it. An authenticated project mem | High(7.2) | AffectedDetails (24)
|
| [CVE-2026-93861] Published: In OpenStack Mistral through 23.0.0, the workflow membership API lets a project that has accepted a share of another project's private workflow create a further membership naming a third project. The | Medium(6) | AffectedDetails (24)
|
| [CVE-2018-16848] Published: mistral: CVE-2018-16848 | Medium | Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Details (24)
|
| [CVE-2019-3866] Published: mistral: CVE-2019-3866 | Medium(5.9) | Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Details (24)
|
| [CVE-2018-16849] Published: mistral: CVE-2018-16849 | Medium(4.3) | Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Details (24)
|
| [CVE-2017-2622] Published: mistral: CVE-2017-2622 | Medium(5.9) | Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Details (24)
|
| CVE | Severity | Version impact |
|---|---|---|
| [CVE-2026-41283] Published: OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials. | Critical(9.9) | FixedDetails (24)
|
Last synced:
Authoritative source; repository metadata signature verified
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Authoritative source; repository metadata signature verified
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Authoritative source; repository metadata signature verified
bookworm-security-main-amd64:f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
Authoritative source; repository metadata signature verified
bookworm-security-main-arm64:f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14