https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:07:19.305891+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-54421 CVE-2026-54421 2026-10-02T16:07:19.340313+00:00

Affected: OpenStack Ironic

In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentials). The PATCH outcome is a security issue; the POST outcome is not a security issue.

 https://cve.radiocsirt.org/vuln/ghsa-j4cw-mcg2-2q78 GHSA-j4cw-mcg2-2q78 — OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume properties 2026-10-02T16:07:19.340367+00:00

Affected: PyPI: ironic

In OpenStack Ironic through 35.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentials). The PATCH outcome is a security issue; the POST outcome is not a security issue.