9997 matches found
GHSA-42VR-XJ54-VC7V vulnerabilities
Vulnerabilities for packages: openstack-cinder-2026.1, openstack-designate-2026.1, ggshield, openstack-horizon-2025.1, azureml-inference-server-http, mlrun, openstack-horizon-2026.1, openstack-barbican-2026.1, openstack-octavia-2025.2, openstack-keystone-2025.1-fips,...
GHSA-WVQV-FJ8W-QMHM vulnerabilities
Vulnerabilities for packages: authentik, openstack-horizon-2026.1-fips, openstack-horizon-2026.1...
GHSA-Q238-5CXM-5C9H vulnerabilities
Vulnerabilities for packages: authentik, openstack-horizon-2026.1-fips, openstack-horizon-2026.1...
CVE-2026-15307 vulnerabilities
Vulnerabilities for packages: authentik, openstack-horizon-2026.1-fips, openstack-horizon-2026.1...
CVE-2026-15830 vulnerabilities
Vulnerabilities for packages: authentik, openstack-horizon-2026.1-fips, openstack-horizon-2026.1...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenStack Designate vulnerability (USN-8860-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8860-1 advisory. It was discovered that OpenStack Designate did not properly validate overlapping zones under certain circumstances...
GHSA-8988-9CW3-XX77 vulnerabilities
Vulnerabilities for packages: openstack-designate-2026.1, openstack-octavia-2025.2, openstack-placement-2025.1-fips, py3-opentelemetry-exporter-otlp, superset, openstack-octavia-2026.1, litellm, openstack-placement-2026.1-fips, ansible-operator, kubeflow-pipelines-visualization-server, py3-pip,...
CVE-2026-97689 vulnerabilities
Vulnerabilities for packages: openstack-designate-2026.1, openstack-octavia-2025.2, openstack-placement-2025.1-fips, py3-opentelemetry-exporter-otlp, superset, openstack-octavia-2026.1, litellm, openstack-placement-2026.1-fips, ansible-operator, kubeflow-pipelines-visualization-server, py3-pip,...
GHSA-GH4C-6FX4-QH6G vulnerabilities
Vulnerabilities for packages: openstack-designate-2026.1, openstack-octavia-2025.2, openstack-placement-2025.1-fips, py3-opentelemetry-exporter-otlp, superset, openstack-octavia-2026.1, litellm, openstack-placement-2026.1-fips, ansible-operator, kubeflow-pipelines-visualization-server, py3-pip,...
GHSA-VXQ7-64XX-V4GW vulnerabilities
Vulnerabilities for packages: openstack-designate-2026.1, openstack-octavia-2025.2, openstack-placement-2025.1-fips, py3-opentelemetry-exporter-otlp, superset, openstack-octavia-2026.1, litellm, openstack-placement-2026.1-fips, ansible-operator, kubeflow-pipelines-visualization-server, py3-pip,...
OpenStack Swift vulnerable to authenticated server-side request forgery
In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers X-Container-Host, X-Container-Device, X-Delete-At-Host, X-Delete-At-Device from client requests before forwarding them to object-servers. An authenticated user with write access can inject these headers to...
PYSEC-2026-4173 OpenStack Swift vulnerable to authenticated server-side request forgery
In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers X-Container-Host, X-Container-Device, X-Delete-At-Host, X-Delete-At-Device from client requests before forwarding them to object-servers. An authenticated user with write access can inject these headers to...
CVE-2026-97688 vulnerabilities
Vulnerabilities for packages: openstack-designate-2026.1, openstack-octavia-2025.2, openstack-placement-2025.1-fips, py3-opentelemetry-exporter-otlp, superset, openstack-octavia-2026.1, litellm, openstack-placement-2026.1-fips, ansible-operator, kubeflow-pipelines-visualization-server, py3-pip,...
CVE-2026-97687 vulnerabilities
Vulnerabilities for packages: openstack-designate-2026.1, openstack-octavia-2025.2, openstack-placement-2025.1-fips, py3-opentelemetry-exporter-otlp, superset, openstack-octavia-2026.1, litellm, openstack-placement-2026.1-fips, ansible-operator, kubeflow-pipelines-visualization-server, py3-pip,...
USN-8860-1 designate vulnerability
It was discovered that OpenStack Designate did not properly validate overlapping zones under certain circumstances. An authenticated user could possibly use this issue to redirect DNS traffic to attacker-controlled systems or cause a denial of service...
USN-8860-1: OpenStack Designate vulnerability
It was discovered that OpenStack Designate did not properly validate overlapping zones under certain circumstances. An authenticated user could possibly use this issue to redirect DNS traffic to attacker-controlled systems or cause a denial of service...
PT-2026-104824
It was discovered that OpenStack Designate did not properly validate overlapping zones under certain circumstances. An authenticated user could possibly use this issue to redirect DNS traffic to attacker-controlled systems or cause a denial of service...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenStack Keystone vulnerabilities (USN-8854-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8854-1 advisory. Grzegorz Grasza discovered that OpenStack Keystone did not consistently enforce restrictions...
PT-2026-105916
In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers X-Container-Host, X-Container-Device, X-Delete-At-Host, X-Delete-At-Device from client requests before forwarding them to object-servers. An authenticated user with write access can inject these headers to...
CVE-2026-102266 vulnerabilities
Vulnerabilities for packages: openstack-cinder-2026.1, openstack-designate-2026.1, ggshield, openstack-horizon-2025.1, azureml-inference-server-http, openstack-octavia-2025.2, openstack-horizon-2026.1, openstack-placement-2025.1-fips, openstack-keystone-2025.1-fips, datahub-ingestion, authentik,...