https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:21:06.823465+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-00933 bdu:2023-00933 2026-10-03T10:21:06.837581+00:00 bdu:2023-00933 https://cve.radiocsirt.org/vuln/euvd-2026-227135 EUVD-2026-227135 2026-10-03T10:21:06.837619+00:00 EUVD-2026-227135 https://cve.radiocsirt.org/vuln/fkie_cve-2022-47950 fkie_cve-2022-47950 2026-10-03T10:21:06.837633+00:00

An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from the host server, resulting in unauthorized read access to potentially sensitive data. This impacts both s3api deployments (Rocky or later), and swift3 deployments (Queens and earlier, no longer actively developed).

 https://cve.radiocsirt.org/vuln/ghsa-274c-rx2j-2v3x GHSA-274c-rx2j-2v3x — OpenStack Swift XML external entities (XXE) Injection 2026-10-03T10:21:06.837664+00:00

Affected: PyPI: swift

An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from the host server, resulting in unauthorized read access to potentially sensitive data. This impacts both s3api deployments (Rocky or later), and swift3 deployments (Queens and earlier, no longer actively developed).

 https://cve.radiocsirt.org/vuln/gsd-2022-47950 gsd-2022-47950 2026-10-03T10:21:06.837693+00:00 gsd-2022-47950 https://cve.radiocsirt.org/vuln/pysec-2026-927 PYSEC-2026-927 — OpenStack Swift XML external entities (XXE) Injection 2026-10-03T10:21:06.837706+00:00

Affected: PyPI: swift

An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from the host server, resulting in unauthorized read access to potentially sensitive data. This impacts both s3api deployments (Rocky or later), and swift3 deployments (Queens and earlier, no longer actively developed).

 https://cve.radiocsirt.org/vuln/rhsa-2023:1013 RHSA-2023:1013 — Red Hat Security Advisory: Red Hat OpenStack Platform 17.0 (openstack-swift) security update 2026-10-03T10:21:06.837727+00:00

openstack-swift: Arbitrary file access through custom S3 XML entities

 https://cve.radiocsirt.org/vuln/suse-su-2023:0323-1 SUSE-SU-2023:0323-1 — Security update for python-swift3 2026-10-03T10:21:06.837745+00:00

Security update for python-swift3

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-47950 UBUNTU-CVE-2022-47950 2026-10-03T10:21:06.837760+00:00

Affected: Ubuntu:16.04:LTS: swift, Ubuntu:20.04:LTS: swift, Ubuntu:22.04:LTS: swift

An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from the host server, resulting in unauthorized read access to potentially sensitive data. This impacts both s3api deployments (Rocky or later), and swift3 deployments (Queens and earlier, no longer actively developed).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0518 WID-SEC-W-2023-0518 — Red Hat OpenStack: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen 2026-10-03T10:21:06.837783+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Red Hat OpenStack ausnutzen, um Informationen offenzulegen.