PyPI: nova

CVE-2019-14433

Safety vulnerability ID: SFTY-20190809-56734

Safety legacy ID: pyup.io-37361

Nova 17.0.12, 18.2.2 and 19.0.2 include a fix for CVE-2019-14433: An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensitive configuration or other data.

PythonPyPINVDNVDGitHubGHSA
Created at: Jul 5, 2026Updated at: Jul 5, 2026

Overview

OpenStack Nova Server Resource Faults Leak External Exception Details

Advisory

Nova 17.0.12, 18.2.2 and 19.0.2 include a fix for CVE-2019-14433: An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exception, details of the underlying environment may be leaked in the response, and could include sensitive configuration or other data.

Affected Package

Affecting nova package, versions<17.0.12>=18.0.0.0rc1,<18.2.2>=19.0.0.0rc1,<19.0.2

Also affects

---

How to Fix

Upgradenovato17.0.1218.2.219.0.2or higher.

Mitigation and Workarounds

---

Vulnerable Functions

Functions linked to known vulnerabilities.

Vulnerable function data is available for Enterprise customers

Book a call with us to see Safety in action.

References

Safety

Verified by Safety

Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.

Learn more