https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-10T17:07:21.135714+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-54421 CVE-2026-54421 2026-10-10T17:07:22.446683+00:00

Affected: OpenStack Ironic

In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentials). The PATCH outcome is a security issue; the POST outcome is not a security issue.

 https://vulnerability.circl.lu/vuln/pysec-2026-3852 PYSEC-2026-3852 — OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume properties 2026-10-10T17:07:22.446829+00:00

Affected: PyPI: ironic

In OpenStack Ironic through 35.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentials). The PATCH outcome is a security issue; the POST outcome is not a security issue.