https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 14:18:01 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-327821 EUVD-2026-327821 https://cve.radiocsirt.org/vuln/euvd-2026-327821 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54421 <p>In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentials). The PATCH outcome is a security issue; the POST outcome is not a security issue.</p> <p>In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentials). The PATCH outcome is a security issue; the POST outcome is not a security issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-54421 https://cve.radiocsirt.org/vuln/ghsa-j4cw-mcg2-2q78 <p><strong>Affected:</strong> PyPI: ironic</p> <p>In OpenStack Ironic through 35.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentials). The PATCH outcome is a security issue; the POST outcome is not a security issue.</p> <p><strong>Affected:</strong> PyPI: ironic</p> <p>In OpenStack Ironic through 35.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentials). The PATCH outcome is a security issue; the POST outcome is not a security issue.</p> https://cve.radiocsirt.org/vuln/ghsa-j4cw-mcg2-2q78 https://cve.radiocsirt.org/vuln/pysec-2026-3852 <p><strong>Affected:</strong> PyPI: ironic</p> <p>In OpenStack Ironic through 35.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentials). The PATCH outcome is a security issue; the POST outcome is not a security issue.</p> <p><strong>Affected:</strong> PyPI: ironic</p> <p>In OpenStack Ironic through 35.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentials). The PATCH outcome is a security issue; the POST outcome is not a security issue.</p> https://cve.radiocsirt.org/vuln/pysec-2026-3852 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-54421 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ironic, Ubuntu:18.04:LTS: ironic, Ubuntu:20.04:LTS: ironic, Ubuntu:22.04:LTS: ironic, Ubuntu:24.04:LTS: ironic, Ubuntu:25.10: ironic, Ubuntu:26.04:LTS: ironic</p> <p>In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentials). The PATCH outcome is a security issue; the POST outcome is not a security issue.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ironic, Ubuntu:18.04:LTS: ironic, Ubuntu:20.04:LTS: ironic, Ubuntu:22.04:LTS: ironic, Ubuntu:24.04:LTS: ironic, Ubuntu:25.10: ironic, Ubuntu:26.04:LTS: ironic</p> <p>In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentials). The PATCH outcome is a security issue; the POST outcome is not a security issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-54421 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1912 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat OpenStack ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat OpenStack ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1912