Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-swift-proxy-server

Red Hat · Package

5 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
OpenStack Swift vulnerable to authenticated server-side request forgeryCVE-2026-50221 · GHSA-H8RC-W822-Q8VQVersion ranges need review.	swift Red Hat Developer Hub 1/rhdh/rhdh-hub-rhel9	PyPIRed Hat	Medium	Fix reported	2026-10-21
OpenStack's Mistral Client has a local file inclusion vulnerabilityCVE-2021-4472 · GHSA-75HX-6R6J-HW56Version ranges need review.	python-mistralclient Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-aodh-api	PyPIRed Hat	Medium	Fix reported	2026-07-07
openstack-swift: openstack-swift: S3API cross-tenant object read via Swift-native header injectionCVE-2026-71192	Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-swift-account Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-swift-base	Red Hat	Medium	No fix reported	Not recorded
openstack-swift: openstack-swift: S3API presigned URL unsigned header authorization bypassCVE-2026-71191	Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-swift-account Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-swift-base	Red Hat	High	No fix reported	Not recorded
openstack-swift: openstack-swift: Unauthenticated denial of service via catastrophic backtracking in Accept header parserCVE-2026-71190	Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-swift-account Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-swift-base	Red Hat	Medium	No fix reported	Not recorded