-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| apache-libcloud | pip | >= 0.12.3, <= 0.13.2 | 0.13.3 |
The vulnerability stems from the absence of the 'scrub_data' parameter in the destroy_node API call. The GitHub commit 4449e16 explicitly adds this parameter to the request, confirming that the pre-patch version of destroy_node in digitalocean.py was vulnerable. The CVE description and patch context directly implicate this function as the root cause.