Red Hat OpenStack Platform 18.0/openstack-swift

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
OpenStack Swift vulnerable to authenticated server-side request forgeryCVE-2026-50221 · GHSA-H8RC-W822-Q8VQVersion ranges need review.	swift Red Hat Developer Hub 1/rhdh/rhdh-hub-rhel9	PyPIRed Hat	Medium	Fix reported	2026-10-21
OpenStack Swift: s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request bodyCVE-2026-49017 · GHSA-G7JQ-J257-RWW2Version ranges need review.	swift Red Hat OpenStack Platform 16.2/openstack-swift	PyPIRed Hat	High	No fix reported	2026-07-13
Temporary urls leaked via loggingCVE-2017-8761 · GHSA-8FXC-QM65-VPXGVersion ranges need review.	swift Red Hat JBoss Fuse 6/openstack-swift	PyPIRed Hat	Low	Fix reported	2026-07-06
openstack-swift: openstack-swift: S3API cross-tenant object read via Swift-native header injectionCVE-2026-71192	Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-swift-account Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-swift-base	Red Hat	Medium	No fix reported	Not recorded
openstack-swift: openstack-swift: S3API presigned URL unsigned header authorization bypassCVE-2026-71191	Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-swift-account Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-swift-base	Red Hat	High	No fix reported	Not recorded
openstack-swift: openstack-swift: Unauthenticated denial of service via catastrophic backtracking in Accept header parserCVE-2026-71190	Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-swift-account Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-swift-base	Red Hat	Medium	No fix reported	Not recorded
openstack-swift: openstack-swift: unauthorized read of other objects via TempURL and X-Copy-FromCVE-2026-97149	Red Hat OpenStack Platform 13 (Queens)/openstack-swift Red Hat OpenStack Platform 16.2/openstack-swift	Red Hat	Medium	No fix reported	Not recorded