GHSA-8988-9CW3-XX77 vulnerabilities

Vulnerabilities for packages: open-webui, commercial-gitlab-cng-ee-fips, ansible-operator, apache-beam-python-3.11-sdk, openstack-octavia-2025.2, openstack-placement-2025.1-fips, request-1276, tensorflow-gpu-jupyter, kserve-huggingfaceserver-cuda-13.3, py3-pip, openstack-ceph-config-helper-2026.1...

GHSA-GH4C-6FX4-QH6G vulnerabilities

Vulnerabilities for packages: open-webui, commercial-gitlab-cng-ee-fips, ansible-operator, apache-beam-python-3.11-sdk, openstack-octavia-2025.2, openstack-placement-2025.1-fips, request-1276, tensorflow-gpu-jupyter, kserve-huggingfaceserver-cuda-13.3, py3-pip, openstack-ceph-config-helper-2026.1...

PYSEC-2026-4173 OpenStack Swift vulnerable to authenticated server-side request forgery

In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers X-Container-Host, X-Container-Device, X-Delete-At-Host, X-Delete-At-Device from client requests before forwarding them to object-servers. An authenticated user with write access can inject these headers to...

OpenStack Swift vulnerable to authenticated server-side request forgery

In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers X-Container-Host, X-Container-Device, X-Delete-At-Host, X-Delete-At-Device from client requests before forwarding them to object-servers. An authenticated user with write access can inject these headers to...

CVE-2026-97687 vulnerabilities

Vulnerabilities for packages: open-webui, commercial-gitlab-cng-ee-fips, ansible-operator, apache-beam-python-3.11-sdk, openstack-octavia-2025.2, openstack-placement-2025.1-fips, request-1276, tensorflow-gpu-jupyter, kserve-huggingfaceserver-cuda-13.3, py3-pip, openstack-ceph-config-helper-2026.1...

CVE-2026-97688 vulnerabilities

Vulnerabilities for packages: open-webui, commercial-gitlab-cng-ee-fips, ansible-operator, apache-beam-python-3.11-sdk, openstack-octavia-2025.2, openstack-placement-2025.1-fips, request-1276, tensorflow-gpu-jupyter, kserve-huggingfaceserver-cuda-13.3, py3-pip, openstack-ceph-config-helper-2026.1...

USN-8860-1 designate vulnerability

It was discovered that OpenStack Designate did not properly validate overlapping zones under certain circumstances. An authenticated user could possibly use this issue to redirect DNS traffic to attacker-controlled systems or cause a denial of service...

USN-8860-1: OpenStack Designate vulnerability

It was discovered that OpenStack Designate did not properly validate overlapping zones under certain circumstances. An authenticated user could possibly use this issue to redirect DNS traffic to attacker-controlled systems or cause a denial of service...

PT-2026-105916

In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers X-Container-Host, X-Container-Device, X-Delete-At-Host, X-Delete-At-Device from client requests before forwarding them to object-servers. An authenticated user with write access can inject these headers to...

PT-2026-104824

It was discovered that OpenStack Designate did not properly validate overlapping zones under certain circumstances. An authenticated user could possibly use this issue to redirect DNS traffic to attacker-controlled systems or cause a denial of service...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenStack Keystone vulnerabilities (USN-8854-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8854-1 advisory. Grzegorz Grasza discovered that OpenStack Keystone did not consistently enforce restrictions...

CVE-2026-102266 vulnerabilities

Vulnerabilities for packages: authentik-fips, open-webui, superset-fips, nemo-rl-cuda-13.0, kserve, openstack-nova-2026.1, openstack-placement-2025.2, authentik, semgrep, airflow-core, openstack-horizon-2025.2-fips, mcp-atlassian, openstack-horizon-2026.1-fips, datadog-agent-fips,...

GHSA-9J54-FG26-WV3R vulnerabilities

Vulnerabilities for packages: authentik-fips, open-webui, superset-fips, nemo-rl-cuda-13.0, kserve, openstack-nova-2026.1, openstack-placement-2025.2, authentik, semgrep, airflow-core, openstack-horizon-2025.2-fips, mcp-atlassian, openstack-horizon-2026.1-fips, datadog-agent-fips,...

CVE-2026-102265 vulnerabilities

Vulnerabilities for packages: authentik-fips, open-webui, superset-fips, nemo-rl-cuda-13.0, kserve, openstack-nova-2026.1, openstack-placement-2025.2, authentik, semgrep, airflow-core, openstack-horizon-2025.2-fips, mcp-atlassian, openstack-horizon-2026.1-fips, datadog-agent-fips,...

CVE-2026-102269 vulnerabilities

Vulnerabilities for packages: authentik-fips, open-webui, superset-fips, nemo-rl-cuda-13.0, kserve, openstack-nova-2026.1, openstack-placement-2025.2, authentik, semgrep, airflow-core, openstack-horizon-2025.2-fips, mcp-atlassian, openstack-horizon-2026.1-fips, datadog-agent-fips,...

GHSA-HXM8-2XGR-2P9M vulnerabilities

Vulnerabilities for packages: authentik-fips, open-webui, superset-fips, nemo-rl-cuda-13.0, kserve, openstack-nova-2026.1, openstack-placement-2025.2, authentik, semgrep, airflow-core, openstack-horizon-2025.2-fips, mcp-atlassian, openstack-horizon-2026.1-fips, datadog-agent-fips,...

GHSA-8WJV-2P76-3863 vulnerabilities

Vulnerabilities for packages: authentik-fips, open-webui, superset-fips, nemo-rl-cuda-13.0, kserve, openstack-nova-2026.1, openstack-placement-2025.2, authentik, semgrep, airflow-core, openstack-horizon-2025.2-fips, mcp-atlassian, openstack-horizon-2026.1-fips, datadog-agent-fips,...

GHSA-W2CX-738M-MC7W vulnerabilities

Vulnerabilities for packages: authentik-fips, open-webui, superset-fips, nemo-rl-cuda-13.0, kserve, openstack-nova-2026.1, openstack-placement-2025.2, authentik, semgrep, airflow-core, openstack-horizon-2025.2-fips, mcp-atlassian, openstack-horizon-2026.1-fips, datadog-agent-fips,...

CVE-2026-102272 vulnerabilities

Vulnerabilities for packages: authentik-fips, open-webui, superset-fips, nemo-rl-cuda-13.0, kserve, openstack-nova-2026.1, openstack-placement-2025.2, authentik, semgrep, airflow-core, openstack-horizon-2025.2-fips, mcp-atlassian, openstack-horizon-2026.1-fips, datadog-agent-fips,...

CVE-2026-102273 vulnerabilities

Vulnerabilities for packages: authentik-fips, open-webui, superset-fips, nemo-rl-cuda-13.0, kserve, openstack-nova-2026.1, openstack-placement-2025.2, authentik, semgrep, airflow-core, openstack-horizon-2025.2-fips, mcp-atlassian, openstack-horizon-2026.1-fips, datadog-agent-fips,...