ZA
Product
Zaqar
3
CVEs
0
On KEV
9.2
Max CVSS
1
New 30D
Severity mix
Critical 1High 0Medium 2Low 0
Watch
Add Zaqar to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-97404 | 9.2 | Sep 24 | In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header Affected: 1.0.0 before 20.1.2; 21.0.0 before 21.0.2; 22.0.0 before 22.0.2 |
| CVE-2026-107363 | 6.1 | Oct 7 | In OpenStack Zaqar before 23.0.1, the WebSocket transport fails to bind the project identifier in subsequent requests to the project authenticated by the Keystone token Affected: 1.0.0 before 20.1.3; 21.0.0 before 21.0.3; 22.0.0 before 22.0.3; 23.0.0 before 23.0.1 |
| CVE-2026-66139 | 4.8 | Jul 24 | OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known Affected: 12.0.0 before 20.1.1; 21.0.0; 22.0.0 |
Showing 3