{"action":"Upgrade swift to 2.37.2 or later.","affected":[{"fixed":"2.37.2","introduced":"0"}],"component":"swift","cve_ids":["CVE-2026-50221"],"ecosystem":"PyPI","epss":0.00217,"exploited":false,"fixed_versions":["2.37.2"],"ghsa_id":"GHSA-h8rc-w822-q8vq","id":"tcs_01M5KFK8M89JZ5639RH9KK37QZ","modified_at":"2026-10-01T17:56:18.652305640Z","published_at":"2026-06-23T18:31:44Z","references":["https://osv.dev/vulnerability/GHSA-h8rc-w822-q8vq","https://nvd.nist.gov/vuln/detail/CVE-2026-50221","https://github.com/openstack/swift/commit/75b050fdb1d1a6096f3765faa3b2059e28065d13","https://launchpad.net/bugs/2150261","https://opendev.org/openstack/swift/commit/75b050fdb1d1a6096f3765faa3b2059e28065d13","https://security.openstack.org/ossa/OSSA-2026-024.html","https://www.openwall.com/lists/oss-security/2026/06/23/5","http://www.openwall.com/lists/oss-security/2026/06/23/5"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-h8rc-w822-q8vq","url":"https://osv.dev/vulnerability/GHSA-h8rc-w822-q8vq"}],"summary":"OpenStack Swift vulnerable to authenticated server-side request forgery"}