{"action":"Upgrade swift to 2.30.0-4 or later.","affected":[{"fixed":"2.30.0-4","introduced":"0"}],"component":"swift","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["2.30.0-4"],"id":"tcs_01M5NH367E36664617ENT8CRFN","modified_at":"2026-10-15T08:02:33.623746687Z","published_at":"2023-01-18T17:15:10.290Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2022-47950","https://security-tracker.debian.org/tracker/CVE-2022-47950"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2022-47950#Debian:14/swift","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2022-47950"}],"summary":"An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file co"}