Openstack Swift vulnerabilities

• openstack swift In OpenStack Swift before 2.38.2, the tempurl middleware does not reject the X-Copy-From header... CVE-2026-97149 Fix available 5.3 MediumSeptember 24, 2026
• openstack swift In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control... CVE-2026-71192 Fix available 6.0 MediumAugust 5, 2026
• openstack swift In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz-*... CVE-2026-71191 Fix available 6.0 MediumAugust 5, 2026
• openstack swift In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular... CVE-2026-71190 Fix available 8.7 HighAugust 5, 2026
• openstack swift OpenStack Swift vulnerable to authenticated server-side request forgery CVE-2026-50221 Fix available 5.3 MediumJune 23, 2026
• openstack swift OpenStack Swift: s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request body CVE-2026-49017 Fix available 7.1 HighMay 27, 2026
• openstack swift, debian linux +1 more OpenStack Swift XML external entities (XXE) Injection CVE-2022-47950 Fix available 6.5 MediumJanuary 18, 2023
• openstack swift Temporary urls leaked via logging CVE-2017-8761 Fix available 4.3 MediumJune 2, 2021
• openstack puppet-swift, redhat openstack +1 more puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat... CVE-2016-9590 Fix available 6.5 MediumApril 26, 2018
• openstack swauth, swift, debian linux +2 more OpenStack Swauth object/proxy server writing Auth Token to log file CVE-2017-16613 Fix available 9.8 CriticalNovember 21, 2017
• openstack swift OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service CVE-2016-0738 Fix available 7.5 HighJanuary 29, 2016
• openstack swift OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service CVE-2016-0737 Fix available 7.5 HighJanuary 29, 2016
• openstack swift3, fedoraproject fedora +1 more Swift3 before 1.9 allows remote attackers to conduct replay attacks via an Authorization request... CVE-2015-8466 Fix available 7.4 HighJanuary 13, 2016
• openstack swift OpenStack Object Storage (Swift) Sensitive Data Exposure CVE-2015-5223 Fix available 5.0 MediumOctober 19, 2015
• openstack swift, canonical ubuntu linux +1 more OpenStack Swift Unauthorized delete of versioned Swift object CVE-2015-1856 Fix available 5.5 MediumApril 17, 2015
• openstack swift OpenStack Swift metadata constraints are not correctly enforced CVE-2014-7960 Fix available 4.0 MediumOctober 17, 2014
• openstack swift OpenStack Swift Cross-site Scriping vulnerability CVE-2014-3497 Fix available 4.3 MediumJune 20, 2014
• openstack swift Python Swift client is vulnerable to Missing SSL Certificate Check CVE-2013-6396 Fix available 5.8 MediumFebruary 18, 2014
• openstack swift OpenStack Swift Discloses Secret URLs to Timing Attack CVE-2014-0006 Fix available 4.3 MediumJanuary 22, 2014
• openstack folsom, grizzly, havana +1 more +3 more OpenStack Swift allows authenticated users to cause a denial of service CVE-2013-4155 Fix available 4.0 MediumAugust 12, 2013
• openstack swift, redhat storage, fedoraproject fedora +4 more +6 more OpenStack Object Storage (swift) Code Injection vulnerability CVE-2012-4406 Fix available 9.8 CriticalOctober 22, 2012