—

PYSEC-2026-751

Temporary urls leaked via logging

Details

In OpenStack Swift prior to 2.15.2, the proxy-server logs full tempurl paths, potentially leaking reusable tempurl signatures to anyone with read access to these logs. All Swift deployments using the tempurl middleware are affected.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / swift

Introduced in: 0 Fixed in: 2.15.2

Fix pip install --upgrade 'swift>=2.15.2'

References

https://nvd.nist.gov/vuln/detail/CVE-2017-8761 [ADVISORY]
https://bugs.launchpad.net/swift/+bug/1685798/comments/18 [WEB]
https://launchpad.net/bugs/1685798 [WEB]
https://pypi.org/project/swift [PACKAGE]
https://github.com/advisories/GHSA-8fxc-qm65-vpxg [ADVISORY]