{"id":"CVE-2021-3654","aliases":["GHSA-vqp6-j452-j6wp","PYSEC-2026-693"],"title":"Open Redirect in CPython that affects users of OpenStack Nova","summary":"Open Redirect in CPython that affects users of OpenStack Nova","severity":"medium","cvss":6.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","vendor":"nova","product":"nova","ecosystem":"pip","affected":["nova < 21.2.3","nova >= 22.0.0, < 22.2.3","nova >= 23.0.0, < 23.0.3"],"patched":["nova 21.2.3","nova 22.2.3","nova 23.0.3"],"published":"2022-03-04","updated":"2026-07-06","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-vqp6-j452-j6wp","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3654"},{"url":"https://bugs.launchpad.net/nova/+bug/1927677"},{"url":"https://bugs.python.org/issue32084"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1961439"},{"url":"https://opendev.org/openstack/nova"},{"url":"https://opendev.org/openstack/nova/commit/04d48527b62a35d912f93bc75613a6cca606df66"},{"url":"https://opendev.org/openstack/nova/commit/8906552cfc2525a44251d4cf313ece61e57251eb"},{"url":"https://security.gentoo.org/glsa/202305-02"},{"url":"https://security.openstack.org/ossa/OSSA-2021-002.html"},{"url":"https://www.openwall.com/lists/oss-security/2021/07/29/2"}],"tags":["osv","pip","exploit-available"],"epss":0.26792,"epssPercentile":0.97938,"ingestedAt":"2026-07-08T18:25:53.364Z","exploits":{"nuclei":["CVE-2021-3654"],"checkedAt":"2026-09-23T07:13:21.736Z"},"exploitAvailable":true,"slug":"CVE-2021-3654","body":"## Overview\n\nA vulnerability was found in CPython which is used by openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.\n\n## Affected packages\n\n- `nova < 21.2.3`\n- `nova >= 22.0.0, < 22.2.3`\n- `nova >= 23.0.0, < 23.0.3`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `nova 21.2.3`\n- `nova 22.2.3`\n- `nova 23.0.3`","depth":"twilight","depthScore":51,"depthScoreParts":{"impact":33.6,"likelihood":5.4,"exploitation":12,"ransomware":0},"changes":[{"seq":4565,"id":"CVE-2021-3654","ts":1788887191222,"field":"exploit_available","old":"false","new":"true"},{"seq":3448,"id":"CVE-2021-3654","ts":1788886308293,"field":"exploit_available","old":"true","new":"false"},{"seq":2302,"id":"CVE-2021-3654","ts":1788882977950,"field":"exploit_available","old":"false","new":"true"},{"seq":1331,"id":"CVE-2021-3654","ts":1788882389992,"field":"exploit_available","old":"true","new":"false"},{"seq":445,"id":"CVE-2021-3654","ts":1788881825891,"field":"exploit_available","old":"false","new":"true"}]}