Red Hat OpenStack Platform 17.1/rhosp-rhel9/openstack-swift-proxy-server

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
OpenStack Swift vulnerable to authenticated server-side request forgeryCVE-2026-50221 · GHSA-H8RC-W822-Q8VQVersion ranges need review.	swift Red Hat Developer Hub 1/rhdh/rhdh-hub-rhel9	PyPIRed Hat	Medium	Fix reported	2026-10-21
libsodium has Incomplete List of Disallowed InputsCVE-2025-69277 · GHSA-MRFV-M5WM-5W6WVersion ranges need review.	paragonie/sodium_compat hdwallet	ComposerPyPIRed Hat	Medium	Fix reported	2026-09-10
REXML has DoS condition when parsing malformed XML fileCVE-2025-58767 · GHSA-C2F4-JGMC-Q2R5	Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-operator-bundle Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel9-operator	Red HatRubyGems	Low	Fix reported	2026-09-10
openstack-swift: openstack-swift: S3API cross-tenant object read via Swift-native header injectionCVE-2026-71192	Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-swift-account Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-swift-base	Red Hat	Medium	No fix reported	Not recorded
openstack-swift: openstack-swift: S3API presigned URL unsigned header authorization bypassCVE-2026-71191	Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-swift-account Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-swift-base	Red Hat	High	No fix reported	Not recorded
openstack-swift: openstack-swift: Unauthenticated denial of service via catastrophic backtracking in Accept header parserCVE-2026-71190	Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-swift-account Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-swift-base	Red Hat	Medium	No fix reported	Not recorded