| CVE-2026-97149 |
In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header on PUT requests
|
5.3
Medium
|
Sep 24, 2026 |
| CVE-2026-71192 |
In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers (X-Copy-From,…
|
6.0
Medium
|
Aug 5, 2026 |
| CVE-2026-71191 |
In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz-* headers are covered by the…
|
6.0
Medium
|
Aug 5, 2026 |
| CVE-2026-71190 |
In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to…
|
8.7
High
|
Aug 5, 2026 |
| CVE-2026-50221 |
In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers (X-Container-Host,…
|
5.3
Medium
|
Jun 23, 2026 |
| CVE-2026-49017 |
In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when processing a truncated…
|
7.1
High
|
May 27, 2026 |