| Release | Version |
|---|---|
| bookworm | 15.0.0-1 |
| trixie | 20.0.0-2 |
| forky | 23.0.0-2 |
| sid | 23.0.0-3 |
| Bug | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|
| CVE-2026-107363 | vulnerable | vulnerable (no DSA) | fixed | fixed | In OpenStack Zaqar before 23.0.1, the WebSocket transport fails to bin ... |
| CVE-2026-97404 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Si ... |
| CVE-2026-66139 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXT ... |