# swift (PyPI) vulnerabilities 14 known vulnerabilities (1 high, 2 medium), with the versions each affects and the releases that fix them. ## At a glance - Latest release: not known (cve.now hasn't read this package's releases) - Newest unaffected release: not known without release data - Weekly downloads: 1,301 - Dependents: 1 - Registry: https://pypi.org/project/swift/ ## Advisories (14) ### [CVE-2026-50221](https://cve.now/CVE-2026-50221): In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers (X-Container-Host, X-Container-Device… - Severity: Medium 5.3 - Published: Jun 23, 2026 - Affected: fixed in 2.37.2; fixed in 2.37.2. ### [CVE-2026-49017](https://cve.now/CVE-2026-49017): In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request… - Severity: High 7.1 - Published: May 27, 2026 - Affected: from 2.36.0, through 2.36.1; from 2.37.0, through 2.37.1; from 2.36.0, through 2.36.1; from 2.37.0, through 2.37.1. ### [CVE-2022-47950](https://cve.now/CVE-2022-47950): An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. - Severity: Medium 6.5 - Published: Jan 18, 2023 - Affected: fixed in 2.28.1; from 2.29.0, fixed in 2.29.2; from 2.30.0, fixed in 2.30.1; fixed in 2.28.1; from 2.29.0, fixed in 2.29.2; from 2.30.0, fixed in 2.30.1. ### [CVE-2017-8761](https://cve.now/CVE-2017-8761): In OpenStack Swift through 2.10.1, 2.11.0 through 2.13.0, and 2.14.0, the proxy-server logs full tempurl paths, potentially leaking… - Severity: Unrated - Published: Jun 2, 2021 - Affected: fixed in 2.15.2. ### [CVE-2016-0738](https://cve.now/CVE-2016-0738): OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not properly close server connections… - Severity: Unrated - Published: Jan 29, 2016 - Affected: fixed in 2.3.1; from 2.4.0, fixed in 2.5.1; fixed in 2.3.1; from 2.4.0, fixed in 2.5.1. ### [CVE-2016-0737](https://cve.now/CVE-2016-0737): OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial… - Severity: Unrated - Published: Jan 29, 2016 - Affected: fixed in 2.4.0. ### [CVE-2015-5223](https://cve.now/CVE-2015-5223): OpenStack Object Storage (Swift) before 2.4.0 allows attackers to obtain sensitive information via a PUT tempurl and a DLO object manifest… - Severity: Unrated - Published: Oct 26, 2015 - Affected: fixed in 2.4.0. ### [CVE-2015-1856](https://cve.now/CVE-2015-1856): OpenStack Object Storage (Swift) before 2.3.0, when allow\_version is configured, allows remote authenticated users to delete the latest… - Severity: Unrated - Published: Apr 17, 2015 - Affected: fixed in 2.3.0. ### [CVE-2014-7960](https://cve.now/CVE-2014-7960): OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max\_meta\_count and other metadata… - Severity: Unrated - Published: Oct 17, 2014 - Affected: fixed in 2.2.0. ### [CVE-2014-3497](https://cve.now/CVE-2014-3497): Cross-site scripting (XSS) vulnerability in OpenStack Swift 1.11.0 through 1.13.1 allows remote attackers to inject arbitrary web script… - Severity: Unrated - Published: Jul 3, 2014 - Affected: from 1.11.0, fixed in 2.0.0. ### [CVE-2014-0006](https://cve.now/CVE-2014-0006): The TempURL middleware in OpenStack Object Storage (Swift) 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers… - Severity: Unrated - Published: Jan 23, 2014 - Affected: from 1.4.6, through 1.8.0; from 1.9.0, through 1.10.0; from 1.11.0, fixed in 1.12.0; from 1.4.6, fixed in 1.12.0. ### [CVE-2013-4155](https://cve.now/CVE-2013-4155): OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service ("superfluous"… - Severity: Unrated - Published: Aug 20, 2013 - Affected: fixed in 1.9.1. ### [CVE-2013-2161](https://cve.now/CVE-2013-2161): XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or… - Severity: Unrated - Published: Aug 20, 2013 - Affected: fixed in 1.9.0. ### [CVE-2012-4406](https://cve.now/CVE-2012-4406): OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading… - Severity: Unrated - Published: Oct 22, 2012 - Affected: fixed in 1.7.0. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/pypi/swift Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.