{"action":"Upgrade swift to 1.12.0 or later.","affected":[{"fixed":"1.12.0","introduced":"1.4.6"}],"component":"swift","cve_ids":["CVE-2014-0006"],"ecosystem":"PyPI","epss":0.01911,"exploited":false,"fixed_versions":["1.12.0"],"ghsa_id":"GHSA-cf9m-q836-vf26","id":"tcs_01M5KG60M4SQ2558ZDZZXEXV42","modified_at":"2026-07-13T16:15:34.564184864Z","published_at":"2014-01-23T01:55:00Z","references":["https://osv.dev/vulnerability/PYSEC-2014-116","https://bugs.launchpad.net/swift/+bug/1265665","http://www.openwall.com/lists/oss-security/2014/01/17/5","http://rhn.redhat.com/errata/RHSA-2014-0232.html"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2014-116","url":"https://osv.dev/vulnerability/PYSEC-2014-116"}],"summary":"The TempURL middleware in OpenStack Object Storage (Swift) 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing"}