How many CVEs have a located fix in openstack/nova?

42 published CVEs have a fix traced to functions in openstack/nova, touching 143 functions across 54 files.

Which function in openstack/nova has been patched by the most CVEs?

migrate_disk_and_power_off in nova/virt/libvirt/driver.py has been changed by 3 CVE fixes, from 2015 to 2018.

How large is a typical CVE fix in openstack/nova?

The median fix changes 46 lines. 33% of fixes change 20 lines or fewer, and 17% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

python

#98 of 500 repositories

openstack/nova

Name: openstack/nova: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix February 18, 2026

42

CVE fixes located

Published CVEs

143

Functions patched

Distinct function sites

54

Files patched

Distinct source files

2011–2026

Years covered

By CVE publication date

Overview

42 published CVEs have a fix traced to functions in openstack/nova, the earliest published in 2011. Those fixes changed 143 distinct functions across 54 files, in 515 patch hunks.

Among the 500 repositories tracked here, openstack/nova ranks #98 by the number of CVEs with a located fix.

Most patched functions

Functions in openstack/nova changed by the most CVE fixes.

Most patched files

Files in openstack/nova changed by the most CVE fixes.

1nova/virt/libvirt/driver.py7 CVEs · 22 functions
2nova/virt/disk/api.py5 CVEs · 7 functions
3nova/virt/libvirt/imagebackend.py4 CVEs · 8 functions
4nova/virt/images.py4 CVEs · 3 functions
5nova/virt/libvirt/utils.py4 CVEs · 3 functions
6nova/compute/api.py3 CVEs · 7 functions
7nova/compute/manager.py3 CVEs · 6 functions
8nova/db/sqlalchemy/api.py3 CVEs · 5 functions
9nova/exception.py3 CVEs · 3 functions
10nova/consoleauth/manager.py2 CVEs · 6 functions

Fix size

How much code a CVE fix in openstack/nova changes, with backports counted once.

46

Median lines changed

Added plus removed, per CVE

33%

Fixes of 20 lines or fewer

Share of CVE fixes

17%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in openstack/nova, and the functions each fix changed.

OpenStack Nova calls qemu-img without format restrictions for resize
CVE-2026-24708extend
High · CVSS 8.2
EPSS 0.4%2026-02-18
OpenStack Cinder, glance, and Nova vulnerable to Path Traversal
CVE-2022-47951_process_security_groups obj_make_compatible
Medium · CVSS 5.7
EPSS 1.0%2023-01-26
OpenStack Nova Changing vnic_type breaks compute service restart
CVE-2022-37394_log_error_if_vnic_type_changed _build_network_info_model _init_instance
Low · CVSS 3.3
EPSS 0.3%2022-08-03
OpenStack Nova Live migration fails to update persistent domain XML
CVE-2020-17376_live_migration_operation repr_method migrate
High · CVSS 8.7
EPSS 1.7%2020-08-26
OpenStack Nova can leak consoleauth token into log files
CVE-2015-9543new_websocket_client authorize_console check_token
Low · CVSS 3.3
EPSS 0.4%2020-02-19
OpenStack Nova Exposure of Sensitive Information to an Unauthorized Actor
CVE-2011-4076__repr____call__
Medium · CVSS 5.9
EPSS 1.5%2019-11-26
OpenStack Nova Server Resource Faults Leak External Exception Details
CVE-2019-14433exception_to_dict _get_fault_details
High · CVSS 7.1
EPSS 1.9%2019-08-09
qcow format could expose host filesystem information
CVE-2011-3147fetch_to_raw _fetch_image
High · CVSS 8.6
EPSS 0.7%2019-04-22
OpenStack Nova Denial of service attack on the compute host
CVE-2017-18191_get_volume_encryption swap_volume _create_domain_and_network
High · CVSS 7.5
EPSS 3.7%2018-02-19
OpenStack Nova DoS by rebuilding the same instance with a new image multiple times
CVE-2017-17051_claim_resources
High · CVSS 8.6
EPSS 2.0%2017-12-05
OpenStack Nova Filter Scheduler Bypass
CVE-2017-16239_reset_image_metadata rebuild_instance
Medium · CVSS 6.5
EPSS 1.4%2017-11-14
OpenStack Compute (Nova) Improper Access Control
CVE-2015-2687refresh_conn_infos
Medium · CVSS 6.0
EPSS 0.3%2017-08-09

Get an alert for each new openstack/nova CVE, with the patched functions and AI-written analysis.

Monitor nova CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

aio-libs/aiohttp42 CVEs directus/directus42 CVEs freescout-help-desk/freescout42 CVEs getgrav/grav42 CVEs argoproj/argo-cd43 CVEs coollabsio/coolify43 CVEs grafana/grafana43 CVEs LimeSurvey/LimeSurvey43 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in openstack/nova.

How many CVEs have a located fix in openstack/nova?: 42 published CVEs have a fix traced to functions in openstack/nova, touching 143 functions across 54 files.
Which function in openstack/nova has been patched by the most CVEs?: migrate_disk_and_power_off in nova/virt/libvirt/driver.py has been changed by 3 CVE fixes, from 2015 to 2018.
How large is a typical CVE fix in openstack/nova?: The median fix changes 46 lines. 33% of fixes change 20 lines or fewer, and 17% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track openstack/nova CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing