oss-security·2d ago high[OSSA-2026-042] OpenStack Zaqar: Zaqar empty URL-Signature header bypasses authentication (CVE-2026-97404)#openstack#zaqar#cve-2026-97404CVE-2026-97404