---
id: CVE-2021-3654
aliases:
  - GHSA-vqp6-j452-j6wp
  - PYSEC-2026-693
title: Open Redirect in CPython that affects users of OpenStack Nova
summary: Open Redirect in CPython that affects users of OpenStack Nova
severity: medium
cvss: 6.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N'
vendor: nova
product: nova
ecosystem: pip
affected:
  - nova < 21.2.3
  - 'nova >= 22.0.0, < 22.2.3'
  - 'nova >= 23.0.0, < 23.0.3'
patched:
  - nova 21.2.3
  - nova 22.2.3
  - nova 23.0.3
published: '2022-03-04'
updated: '2026-07-06'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-vqp6-j452-j6wp'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2021-3654'
  - url: 'https://bugs.launchpad.net/nova/+bug/1927677'
  - url: 'https://bugs.python.org/issue32084'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=1961439'
  - url: 'https://opendev.org/openstack/nova'
  - url: >-
      https://opendev.org/openstack/nova/commit/04d48527b62a35d912f93bc75613a6cca606df66
  - url: >-
      https://opendev.org/openstack/nova/commit/8906552cfc2525a44251d4cf313ece61e57251eb
  - url: 'https://security.gentoo.org/glsa/202305-02'
  - url: 'https://security.openstack.org/ossa/OSSA-2021-002.html'
  - url: 'https://www.openwall.com/lists/oss-security/2021/07/29/2'
tags:
  - osv
  - pip
  - exploit-available
epss: 0.26792
epssPercentile: 0.97967
ingestedAt: '2026-07-08T18:25:53.364Z'
exploits:
  nuclei:
    - CVE-2021-3654
  checkedAt: '2026-09-28T12:09:33.137Z'
exploitAvailable: true
---

## Overview

A vulnerability was found in CPython which is used by openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.

## Affected packages

- `nova < 21.2.3`
- `nova >= 22.0.0, < 22.2.3`
- `nova >= 23.0.0, < 23.0.3`

## Remediation

Upgrade to a patched release:

- `nova 21.2.3`
- `nova 22.2.3`
- `nova 23.0.3`