Nova noVNC contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations.
View the template here CVE-2021-3654.yaml
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3654