cinder@22.3.0 vulnerabilities

OpenStack Block Storage

Known vulnerabilities in the cinder package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M Expected Behavior Violation cinder is a storage service for an open cloud computing service Affected versions of this package are vulnerable to Expected Behavior Violation. A remote, authenticated attacker can exploit this vulnerability by detaching one of their volumes from Cinder. How to fix Expected Behavior Violation? Upgrade `cinder` to version 23.0.0.0rc1 or higher.	[,23.0.0.0rc1)