https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:26:06 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-348876 EUVD-2026-348876 https://cve.radiocsirt.org/vuln/euvd-2026-348876 https://cve.radiocsirt.org/vuln/fkie_cve-2026-71190 <p>In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracking (ReDoS). The &#34;qdtext&#34; pattern (?:[^&#34;]|\\.)* allows an unauthenticated remote attacker to send a crafted Accept header that causes exponential CPU consumption in the proxy worker. A payload of 32 backslash-character pairs exceeds 30 seconds of CPU time. No authentication is required. Repeated requests can exhaust all proxy worker threads, resulting in a complete denial of service.</p> <p>In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracking (ReDoS). The &#34;qdtext&#34; pattern (?:[^&#34;]|\\.)* allows an unauthenticated remote attacker to send a crafted Accept header that causes exponential CPU consumption in the proxy worker. A payload of 32 backslash-character pairs exceeds 30 seconds of CPU time. No authentication is required. Repeated requests can exhaust all proxy worker threads, resulting in a complete denial of service.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-71190 https://cve.radiocsirt.org/vuln/ghsa-4jj7-q8c5-78g4 <p>In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracking (ReDoS). The &#34;qdtext&#34; pattern (?:[^&#34;]|\\.)* allows an unauthenticated remote attacker to send a crafted Accept header that causes exponential CPU consumption in the proxy worker. A payload of 32 backslash-character pairs exceeds 30 seconds of CPU time. No authentication is required. Repeated requests can exhaust all proxy worker threads, resulting in a complete denial of service.</p> <p>In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracking (ReDoS). The &#34;qdtext&#34; pattern (?:[^&#34;]|\\.)* allows an unauthenticated remote attacker to send a crafted Accept header that causes exponential CPU consumption in the proxy worker. A payload of 32 backslash-character pairs exceeds 30 seconds of CPU time. No authentication is required. Repeated requests can exhaust all proxy worker threads, resulting in a complete denial of service.</p> https://cve.radiocsirt.org/vuln/ghsa-4jj7-q8c5-78g4 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-71190 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: swift, Ubuntu:18.04:LTS: swift, Ubuntu:20.04:LTS: swift, Ubuntu:22.04:LTS: swift, Ubuntu:24.04:LTS: swift, Ubuntu:26.04:LTS: swift</p> <p>In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracking (ReDoS). The &#34;qdtext&#34; pattern (?:[^&#34;]|\\.)* allows an unauthenticated remote attacker to send a crafted Accept header that causes exponential CPU consumption in the proxy worker. A payload of 32 backslash-character pairs exceeds 30 seconds of CPU time. No authentication is required. Repeated requests can exhaust all proxy worker threads, resulting in a complete denial of service.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: swift, Ubuntu:18.04:LTS: swift, Ubuntu:20.04:LTS: swift, Ubuntu:22.04:LTS: swift, Ubuntu:24.04:LTS: swift, Ubuntu:26.04:LTS: swift</p> <p>In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracking (ReDoS). The &#34;qdtext&#34; pattern (?:[^&#34;]|\\.)* allows an unauthenticated remote attacker to send a crafted Accept header that causes exponential CPU consumption in the proxy worker. A payload of 32 backslash-character pairs exceeds 30 seconds of CPU time. No authentication is required. Repeated requests can exhaust all proxy worker threads, resulting in a complete denial of service.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-71190