{"action":"Upgrade swift to 2.28.1 or later.","affected":[{"fixed":"2.28.1","introduced":"0"},{"fixed":"2.29.2","introduced":"2.29.0"},{"fixed":"2.30.1","introduced":"2.30.0"}],"component":"swift","cve_ids":["CVE-2022-47950"],"ecosystem":"PyPI","epss":0.01009,"exploited":false,"fixed_versions":["2.28.1","2.29.2","2.30.1"],"ghsa_id":"GHSA-274c-rx2j-2v3x","id":"tcs_01M5KHEE3VBFMPP49VWYAWFTRX","modified_at":"2026-07-07T11:45:51.175050735Z","published_at":"2026-07-07T10:17:27.001120Z","references":["https://osv.dev/vulnerability/PYSEC-2026-927","https://nvd.nist.gov/vuln/detail/CVE-2022-47950","https://github.com/openstack/swift/commit/12e54391861e7d182d58f89fb88b027e65842640","https://github.com/openstack/swift/commit/7d13d1a82e1f5d01205a13184907501b4fcbe2b0","https://github.com/openstack/swift/commit/8dd96470a859dc7b189404fb67bd3899ae9c617f","https://github.com/openstack/swift/commit/b8467e190f6fc67fd8fb6a8c5e32b2aa6a10fd8e","https://github.com/openstack/swift/commit/baa98848451b5c234443a068691e12841a5a8383","https://github.com/openstack/swift/commit/c834e7a53d5a33a3fd13ffd954e6f4f4ee953dfc","https://github.com/openstack/swift/commit/d8d04ef43c90079d436b2e49617b4425ba39c28e","https://github.com/openstack/swift/commit/f10672514217adadfc776d9ea2ffb20a37ce073b","https://github.com/openstack/swift","https://launchpad.net/bugs/1998625","https://lists.debian.org/debian-lts-announce/2023/01/msg00021.html","https://security.openstack.org/ossa/OSSA-2023-001.html","https://www.debian.org/security/2023/dsa-5327","https://pypi.org/project/swift","https://github.com/advisories/GHSA-274c-rx2j-2v3x"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-927","url":"https://osv.dev/vulnerability/PYSEC-2026-927"}],"summary":"OpenStack Swift XML external entities (XXE) Injection"}