{"action":"Upgrade swift to 2.37.2 or later.","affected":[{"fixed":"2.37.2","introduced":"0"}],"component":"swift","cve_ids":["CVE-2026-50221"],"ecosystem":"PyPI","exploited":false,"fixed_versions":["2.37.2"],"ghsa_id":"GHSA-h8rc-w822-q8vq","id":"tcs_01M5JK9GD84199YES92QGG9NX5","modified_at":"2026-10-21T10:00:31.755686774Z","published_at":"2026-10-01T16:38:28.770708Z","references":["https://osv.dev/vulnerability/PYSEC-2026-4173","https://nvd.nist.gov/vuln/detail/CVE-2026-50221","https://github.com/openstack/swift/commit/75b050fdb1d1a6096f3765faa3b2059e28065d13","https://launchpad.net/bugs/2150261","https://opendev.org/openstack/swift/commit/75b050fdb1d1a6096f3765faa3b2059e28065d13","https://security.openstack.org/ossa/OSSA-2026-024.html","https://www.openwall.com/lists/oss-security/2026/06/23/5","http://www.openwall.com/lists/oss-security/2026/06/23/5","https://pypi.org/project/swift","https://github.com/advisories/GHSA-h8rc-w822-q8vq"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"PYSEC-2026-4173","url":"https://osv.dev/vulnerability/PYSEC-2026-4173"}],"summary":"OpenStack Swift vulnerable to authenticated server-side request forgery"}