OpenStack Aodh

• CVE-2026-76878 High 8.4 In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the all_projects query parameter is set to false. The API checks for the presence of the all_projects key rather than 0.5%