https://seclists.org/oss-sec/2026/q4/89: [OSSA-2026-043] OpenStack Zaqar: Zaqar WebSocket project substitution allows cross-project queue access (CVE-2026-pending)
Published Oct 7, 2026
·Updated
Affected Software
1 affected component
Openstack Zaqar>=1.0.0<20.1.3, >=21.0.0<21.0.3, >=22.0.0<22.0.3, =23.0.0
Frequently Asked Questions
1
Which release branches have patches available?
Patches are listed for 2025.1/epoxy, 2025.2/flamingo, 2026.1/gazpacho, 2026.2/hibiscus, and the 2027.1/indri development branch.