| CVE-2026-97149 |
In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header on PUT requests
|
5.3
Moyenne
|
24 sept. 2026 |
| CVE-2026-71192 |
In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers (X-Copy-From,…
|
6.0
Moyenne
|
5 août 2026 |
| CVE-2026-71191 |
In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz-* headers are covered by the…
|
6.0
Moyenne
|
5 août 2026 |
| CVE-2026-71190 |
In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to…
|
8.7
Élevée
|
5 août 2026 |
| CVE-2026-50221 |
In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers (X-Container-Host,…
|
5.3
Moyenne
|
23 juin 2026 |
| CVE-2026-49017 |
In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when processing a truncated…
|
7.1
Élevée
|
27 mai 2026 |