Apache-2.0
All Versions
Vulnerabilities (Public)
Known vulnerabilities and security issues detected in the extension's dependencies and code.
| Vulnerability ID | Advisory | Affected Versions | |||
|---|---|---|---|---|---|
| CVE-2026-41283 | mistral – Arbitrary Remote Code Execution | Critical | – | – | >= 20.0.0, < 20.1.1== 21.0.0== 22.0.0 |
| CVE-2018-16849 | Mistral 7.0.1 includes a fix for CVE-2018-16849: By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the e… | High | – | – | <7.0.1 |
| CVE-2018-16848 | A Denial of Service (DoS) condition is possible in OpenStack Mistral in versions up to and including 7.0.3. Submitting a specially crafted workflow definition YAML file containing nested anchors can l… | Medium | – | – | <=7.0.3 |
| CVE-2019-3866 | An information-exposure vulnerability was discovered where openstack-mistral's undercloud log files containing clear-text information were made world readable. A malicious system user could exploit th… | Medium | – | – | <7.1.0>=8.0,<8.1.0>=9.0,<9.0.1 |
Safety Discovered Vulnerabilities
Additional security issues found by Safety, exclusive to our platform.