PyPI/swift CVE-2026-49017: medium 6.5, EPSS 0.36%
OpenStack Swift: s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request body
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.36.0 | - | 2.36.1 |
| 2.37.0 | - | 2.37.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-g7jq-j257-rww2
- nvd: CVE-2026-49017
- https://bugs.launchpad.net/bugs/2152205
- https://github.com/openstack/swift
- https://review.opendev.org/c/openstack/swift/+/987957
- https://review.opendev.org/c/openstack/swift/+/988093
- http://www.openwall.com/lists/oss-security/2026/05/27/9
- http://www.openwall.com/lists/oss-security/2026/06/02/6
CVE-2026-49017 · published · modified · JSON