PyPI / keylime

Keylime Missing Authentication for Critical Function and Improper Authentication

수정: 2026. 5. 20.

Keylime registrar is vulnerable to Denial-of-Service attack when updated to version 7.12.0

수정: 2025. 3. 15.

Keylime registrar and (untrusted) Agent can be bypassed by an attacker

수정: 2026. 2. 4.

keylime fails to flag device as untrusted when signature does not validate

수정: 2025. 2. 15.

Keylime: unhandled exceptions could lead to invalid attestation states

수정: 2025. 4. 29.

Tenant and Verifier might not use the same registrar data

수정: 2026. 5. 5.

Keylime's registrar vulnerable to Denial-of-service attack via a single open connection

수정: 2025. 2. 14.

Keylime has a hardcoded attestation challenge nonce that allows replay attacks

수정: 2026. 5. 11.

Keylime allows users to register new agents by recycling existing UUIDs when using different TPM devices

수정: 2026. 5. 29.

수정: 2026. 5. 5.

수정: 2023. 11. 8.

수정: 2023. 11. 8.

수정: 2023. 11. 8.

수정: 2026. 5. 19.

수정: 2026. 5. 20.