Red Hat OpenStack Platform 16.2/rhosp-rhel8/openstack-swift-object

Red Hat · Package

8 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
dnspython dns.name.from_wire_parser() excessive CPU useCVE-2026-114605 · GHSA-45C3-73F7-PV4M	dnspython Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9	PyPIRed Hat	High	Fix reported	2026-11-12
OpenStack Swift vulnerable to authenticated server-side request forgeryCVE-2026-50221 · GHSA-H8RC-W822-Q8VQVersion ranges need review.	swift Red Hat Developer Hub 1/rhdh/rhdh-hub-rhel9	PyPIRed Hat	Medium	Fix reported	2026-10-21
`lxml_html_clean.Cleaner` does not strip `javascript:` URLs from namespaced URL attributesCVE-2026-49825 · GHSA-4JHM-JV67-739FVersion ranges need review.	lxml-html-clean Lightspeed Core/lightspeed-core/lightspeed-stack-rhel9	PyPIRed Hat	High	Fix reported	2026-07-13
openstack-swift: openstack-swift: S3API cross-tenant object read via Swift-native header injectionCVE-2026-71192	Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-swift-account Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-swift-base	Red Hat	Medium	No fix reported	Not recorded
openstack-swift: openstack-swift: S3API presigned URL unsigned header authorization bypassCVE-2026-71191	Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-swift-account Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-swift-base	Red Hat	High	No fix reported	Not recorded
openstack-swift: openstack-swift: Unauthenticated denial of service via catastrophic backtracking in Accept header parserCVE-2026-71190	Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-swift-account Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-swift-base	Red Hat	Medium	No fix reported	Not recorded
ironic: OpenStack Ironic: Information disclosure via crafted requestCVE-2026-71201	Red Hat OpenShift Container Platform 4/openshift4/ose-baremetal-rhel8-operator Red Hat OpenShift Container Platform 4/openshift4/ose-baremetal-rhel9-operator	Red Hat	Medium	No fix reported	Not recorded
openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmissionCVE-2026-84782	Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 Confidential Compute Attestation/agent-sandbox/agent-sandbox-router	Red Hat	High	No fix reported	Not recorded