What is GHSA-979m-gf7m-rg53?

GHSA-979m-gf7m-rg53 is a security advisory published by GitHub Security Advisories with Low severity. In OpenStack Ironic through 35.x, instance_info['ks_template'] is rendered without sandboxing.

Which CVE IDs does GHSA-979m-gf7m-rg53 cover?

GHSA-979m-gf7m-rg53 covers the following CVE IDs: CVE-2026-44916. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-979m-gf7m-rg53?

GHSA-979m-gf7m-rg53 has a CVSS v3 base score of 3.0, published by GitHub Security Advisories.

GHSA-979m-gf7m-rg53LowCVSS 3.0

In OpenStack Ironic through 35.x, instance_info['ks_template'] is rendered without sandboxing.

Vendor

GitHub Security Advisories

Published

May 8, 2026

Last Modified

May 20, 2026

🔗 CVE IDs covered (1)

CVE-2026-44916 →

📋 Description

In OpenStack Ironic through 35.x, instance_info['ks_template'] is rendered without sandboxing.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-44916
https://bugs.launchpad.net/ironic/+bug/2148307
http://www.openwall.com/lists/oss-security/2026/05/11/7
https://security.openstack.org/ossa/OSSA-2026-012.html
https://github.com/advisories/GHSA-979m-gf7m-rg53