OpenStack Zaqar
3 CVEs affecting OpenStack Zaqar. Latest disclosed: 2026-10-07. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-66139 | Medium | 4.8 | 2026-07-24 | OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known. |
CVE-2026-107363 | | 2026-10-07 | In OpenStack Zaqar before 23.0.1, the WebSocket transport fails to bind the project identifier in subsequent requests to the project authenticated by the Keyst… | |
CVE-2026-97404 | | 2026-09-24 | In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header. By sending a request with an empty URL-Signature header, an unauthenticat… |