NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#zaqar

0 stories this week · 0 this month · 3 in 6 months · mostly security

Stories per day · 30 days

2 stories, newest first · one card per story

oss-securityOct 7, 2026

Re: [OSSA-2026-043] OpenStack Zaqar: Zaqar WebSocket project substitution allows cross-project queue access (CVE-2026-107363) errata 1

OpenStack assigned CVE-2026-107363 to a Zaqar WebSocket flaw enabling cross-project queue access.

2 sources openstack zaqar

3

oss-securitySep 24, 2026high

[OSSA-2026-042] OpenStack Zaqar: Zaqar empty URL-Signature header bypasses authentication (CVE-2026-97404)

OpenStack Zaqar advisory CVE-2026-97404: an empty URL-Signature header can bypass authentication.

openstack zaqar

2