Yaql

yaql

Vendor: Openstack • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2024-29156

1Openstack

2Murano

Yaql

Mar 25, 2025

Mar 18, 2024

N/A· v4

6.5 MEDIUM· v3

N/A· v2

In OpenStack Murano through 16.0.0, when YAQL before 3.0.0 is used, the Murano service's MuranoPL extension to the YAQL language fails to sanitize the supplied environment, leading to potential leakage of sensitive servi...Show more