MEDIUM5.3PyPI
GHSA-22q6-wwq7-2jj9· CVE-2013-1865, PYSEC-2013-39OpenStack Keystone Improper Authentication vulnerability
Modified: 11/26/2024
package
PyPI/keystone
pkg:pypi/keystone
MEDIUM6.5PyPI
GHSA-23x9-8hxr-978c· CVE-2014-2237, PYSEC-2014-105OpenStack Identity (Keystone) Trustee token revocations does not work with memcache backend
Modified: 4/13/2025
MEDIUMPyPI
GHSA-274v-r947-v34r· CVE-2014-3476, PYSEC-2026-649OpenStack Identity Keystone is vulnerable to Block delegation escalation of privilege
Modified: 7/6/2026
HIGH8.8PyPI
GHSA-2j23-fwqm-mgwr· CVE-2019-19687, PYSEC-2019-29OpenStack Keystone Credential Leakage
Modified: 9/27/2024
MEDIUM6.0PyPI
GHSA-2r23-2g6v-2m5f· CVE-2026-42999, PYSEC-2026-600OpenStack Keystone has an Authorization Bypass
Modified: 9/10/2026
HIGH7.5PyPI
GHSA-4225-97pr-rr52· CVE-2021-38155, PYSEC-2026-830OpenStack Keystone allows information disclosure during account locking
Modified: 7/7/2026
HIGH8.8PyPI
GHSA-4427-7f3w-mqv6· CVE-2020-12691, PYSEC-2020-55OpenStack Keystone V3 /credentials endpoint policy logic allows to change credentials owner or target project ID
Modified: 9/27/2024
LOW3.5PyPI
GHSA-4phw-6824-6cfp· CVE-2026-33551, PYSEC-2026-202OpenStack Keystone: Restricted application credentials can create EC2 credentials
Modified: 6/9/2026
MEDIUM6.5PyPI
GHSA-4ppj-4p4v-jf4p· CVE-2013-0270, PYSEC-2026-650OpenStack Keystone Denial of Service vulnerability via a large HTTP request
Modified: 7/6/2026
MEDIUM5.3PyPI
GHSA-5qpp-v56f-mqfm· CVE-2013-4294, PYSEC-2013-42OpenStack Identity (Keystone) allows remote attackers to bypass intended access restrictions via revoked PKI token
Modified: 11/26/2024
HIGH8.8PyPI
GHSA-6m8p-x4qw-gh5j· CVE-2020-12690, PYSEC-2020-54Insufficient Session Expiration in OpenStack Keystone
Modified: 9/27/2024
HIGH7.5PyPI
GHSA-6mv3-p2gr-wgqf· CVE-2014-2828, PYSEC-2014-106OpenStack Identity (Keystone) DoS through V3 API authentication chaining
Modified: 4/13/2025
MEDIUMPyPI
GHSA-7332-36h8-8jh8· CVE-2013-2014, PYSEC-2026-651OpenStack Identity (Keystone) Denial of Service
Modified: 7/6/2026
MEDIUM6.5PyPI
GHSA-77w8-qv8m-386h· CVE-2014-5253, PYSEC-2014-109OpenStack Keystone Domain-scoped tokens don't get revoked
Modified: 11/26/2024
MEDIUMPyPI
GHSA-8833-qrvm-wc3h· CVE-2013-0282, PYSEC-2026-652OpenStack Keystone allows context-dependent attackers to bypass access restrictions
Modified: 7/6/2026
HIGH7.5PyPI
GHSA-8c4w-v65p-jvcv· CVE-2015-7546, PYSEC-2016-20OpenStack Identity Keystone and keystonemiddleware Insufficiently Protected Credentials
Modified: 7/13/2026
MEDIUM6.0PyPI
GHSA-8f8m-wrvr-wcvf· CVE-2026-42998, PYSEC-2026-599OpenStack Keystone doesn't verify that the user supplied in the authentication request matches the owner of the application credential
Modified: 9/10/2026
MEDIUMPyPI
GHSA-8v8f-vc72-pmhc· CVE-2014-3621, PYSEC-2026-653OpenStack Identity Keystone Exposure of Sensitive Information
Modified: 7/6/2026
MEDIUMPyPI
GHSA-c4p9-87h3-7vr4· CVE-2014-0204, PYSEC-2026-654OpenStack Identity Keystone Improper Privilege Management
Modified: 7/6/2026
CRITICAL9.1PyPI
GHSA-cc99-whm5-mmq3· CVE-2021-3563, PYSEC-2026-370Openstack Keystone Incorrect Authorization vulnerability
Modified: 6/29/2026
HIGH8.8PyPI
GHSA-chgw-36xv-47cw· CVE-2020-12689, PYSEC-2020-53OpenStack Keystone EC2 and/or credential endpoints are not protected from a scoped context
Modified: 9/27/2024
MEDIUM4.3PyPI
GHSA-f82m-w3p3-cgp3· CVE-2016-4911, PYSEC-2016-38OpenStack Identity Keystone Improper Access Control
Modified: 11/26/2024
LOWPyPI
GHSA-f889-wfwm-6p7m· CVE-2013-4477, PYSEC-2026-831OpenStack Identity Keystone Privilege Escalation vulnerability
Modified: 7/7/2026
HIGH7.5PyPI
GHSA-gf2q-j2qq-pjf2· CVE-2012-3542, PYSEC-2012-19OpenStack Keystone Allows Remote User Account Creation
Modified: 9/10/2026
MEDIUM6.5PyPI
GHSA-gmvp-5rf9-mxcm· CVE-2014-5251, PYSEC-2014-107OpenStack Identity (Keystone) Multiple vulnerabilities in revocation events
Modified: 11/26/2024
HIGH7.5PyPI
GHSA-hcqg-5g63-7j9h· CVE-2025-65073, PYSEC-2026-1490OpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization.
Modified: 7/7/2026
HIGH7.9PyPI
GHSA-hhq2-3832-xxcv· CVE-2026-43001, PYSEC-2026-602OpenStack Keystone has an Incorrect Authorization Issue
Modified: 9/10/2026
MEDIUM4.3PyPI
GHSA-hj89-qmx9-8qmh· CVE-2013-2059, PYSEC-2013-41OpenStack Identity (Keystone) improper revoking of the authentication token when deleting a user
Modified: 11/26/2024
HIGH7.2PyPI
GHSA-j36m-hv43-7w7m· CVE-2017-2673, PYSEC-2018-152OpenStack Identity service (keystone) Incorrect Authorization
Modified: 11/26/2024
MEDIUMPyPI
GHSA-jwpw-ppj5-7h4w· CVE-2015-3646, PYSEC-2026-655OpenStack Keystone Logs Passwords
Modified: 7/6/2026
HIGHPyPI
GHSA-mf98-r2gf-2x3w· CVE-2012-4456, PYSEC-2026-832OpenStack Keystone Improper Authentication vulnerability
Modified: 7/7/2026
MEDIUMPyPI
GHSA-mrxv-65rv-6hxq· CVE-2012-4413, PYSEC-2026-833OpenStack Keystone does not invalidate existing tokens when granting or revoking roles
Modified: 9/10/2026
HIGH7.7PyPI
GHSA-pfx2-9x9m-7ghx· CVE-2026-40683, PYSEC-2026-2550OpenStack Keystone: LDAP identity backend does not convert enabled attribute to boolean
Modified: 9/10/2026
MEDIUM6.0PyPI
GHSA-q623-f4j4-p4xj· CVE-2026-43000, PYSEC-2026-601OpenStack Keystone has an Incorrect Authorization issue
Modified: 9/10/2026
MEDIUM5.9PyPI
GHSA-qh2x-hpf9-cf2g· CVE-2013-2255, PYSEC-2026-2413OpenStack Keystone and other components vulnerable to Improper Certificate Validation
Modified: 7/13/2026
MEDIUM5.4PyPI
GHSA-qvpr-qm6w-6rcc· CVE-2012-5571OpenStack Keystone intended authorization restrictions bypass
Modified: 6/10/2026
MEDIUM5.4PyPI
GHSA-rqw2-hhrf-7936· CVE-2020-12692, PYSEC-2020-56OpenStack Keystone does not check signature TTL of the EC2 credential auth method
Modified: 9/27/2024
LOWPyPI
GHSA-rxrm-xvp4-jqvh· CVE-2013-2006OpenStack Keystone Sensitive information disclosure via log files
Modified: 11/22/2024
MEDIUM6.5PyPI
GHSA-v8fq-gq9j-3v7h· CVE-2014-5252, PYSEC-2014-108OpenStack Identity (Keystone) UUID v2 tokens does not expire with revocation events
Modified: 11/26/2024
MEDIUM5.9PyPI
GHSA-w66p-78g4-mr7g· CVE-2012-5563, PYSEC-2012-20OpenStack Keystone Insufficient token expiration
Modified: 9/27/2024
MEDIUM6.0PyPI
GHSA-whqr-fgm5-x77q· CVE-2026-44394, PYSEC-2026-603OpenStack Keystone's federated token rescoping mechanism doesn't propagate the original token's expiry to the newly issued token
Modified: 9/10/2026
MEDIUMPyPI
GHSA-x8h4-xf47-pqc3· CVE-2012-4457, PYSEC-2026-834OpenStack Keystone Token authorization for a user in a disabled tenant is allowed
Modified: 7/7/2026
MEDIUMPyPI
GHSA-xp97-6w7r-4cjc· CVE-2012-3426OpenStack Keystone token expiration issues
Modified: 11/22/2024
—PyPI
PYSEC-2012-19· CVE-2012-3542, GHSA-gf2q-j2qq-pjf2Modified: 6/10/2026
—PyPI
PYSEC-2012-20· CVE-2012-5563, GHSA-w66p-78g4-mr7gModified: 6/10/2026
—PyPI
PYSEC-2013-39· CVE-2013-1865, GHSA-22q6-wwq7-2jj9Modified: 7/1/2026
—PyPI
PYSEC-2013-41· CVE-2013-2059, GHSA-hj89-qmx9-8qmhModified: 11/25/2024
—PyPI
PYSEC-2013-42· CVE-2013-4294, GHSA-5qpp-v56f-mqfmModified: 11/25/2024
—PyPI
PYSEC-2014-105· CVE-2014-2237, GHSA-23x9-8hxr-978cModified: 11/25/2024
—PyPI
PYSEC-2014-106· CVE-2014-2828, GHSA-6mv3-p2gr-wgqfModified: 11/25/2024
—PyPI
PYSEC-2014-107· CVE-2014-5251, GHSA-gmvp-5rf9-mxcmModified: 11/25/2024
—PyPI
PYSEC-2014-108· CVE-2014-5252, GHSA-v8fq-gq9j-3v7hModified: 11/25/2024
—PyPI
PYSEC-2014-109· CVE-2014-5253, GHSA-77w8-qv8m-386hModified: 11/25/2024
MEDIUM4.3PyPI
PYSEC-2016-38· CVE-2016-4911, GHSA-f82m-w3p3-cgp3Modified: 11/25/2024
HIGH7.2PyPI
PYSEC-2018-152· CVE-2017-2673, GHSA-j36m-hv43-7w7mModified: 7/13/2026
—PyPI
PYSEC-2018-9· CVE-2018-20170Modified: 11/8/2023
—PyPI
PYSEC-2019-29· CVE-2019-19687, GHSA-2j23-fwqm-mgwrModified: 6/10/2026
—PyPI
PYSEC-2020-53· CVE-2020-12689, GHSA-chgw-36xv-47cwModified: 6/10/2026
—PyPI
PYSEC-2020-54· CVE-2020-12690, GHSA-6m8p-x4qw-gh5jModified: 11/8/2023
—PyPI
PYSEC-2020-55· CVE-2020-12691, GHSA-4427-7f3w-mqv6Modified: 6/10/2026
—PyPI
PYSEC-2020-56· CVE-2020-12692, GHSA-rqw2-hhrf-7936Modified: 6/10/2026
HIGH7.5PyPI
PYSEC-2026-1490· CVE-2025-65073, GHSA-hcqg-5g63-7j9hOpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization.
Modified: 7/7/2026
MEDIUM5.3PyPI
PYSEC-2026-202· CVE-2026-33551, GHSA-4phw-6824-6cfpModified: 6/10/2026
HIGH7.5PyPI
PYSEC-2026-2549· CVE-2015-7546, GHSA-8c4w-v65p-jvcvOpenStack Identity Keystone and keystonemiddleware Insufficiently Protected Credentials
Modified: 7/13/2026
HIGH7.7PyPI
PYSEC-2026-2550· CVE-2026-40683, GHSA-pfx2-9x9m-7ghxOpenStack Keystone: LDAP identity backend does not convert enabled attribute to boolean
Modified: 7/13/2026
CRITICAL9.1PyPI
PYSEC-2026-370· CVE-2021-3563, GHSA-cc99-whm5-mmq3Openstack Keystone Incorrect Authorization vulnerability
Modified: 7/1/2026
HIGH8.8PyPI
PYSEC-2026-599· CVE-2026-42998, GHSA-8f8m-wrvr-wcvfModified: 7/13/2026
HIGH8.8PyPI
PYSEC-2026-600· CVE-2026-42999, GHSA-2r23-2g6v-2m5fModified: 7/13/2026
HIGH8.8PyPI
PYSEC-2026-601· CVE-2026-43000, GHSA-q623-f4j4-p4xjModified: 7/13/2026
HIGH8.0PyPI
PYSEC-2026-602· CVE-2026-43001, GHSA-hhq2-3832-xxcvModified: 7/13/2026
HIGH8.1PyPI
PYSEC-2026-603· CVE-2026-44394, GHSA-whqr-fgm5-x77qModified: 7/13/2026
—PyPI
PYSEC-2026-649· CVE-2014-3476, GHSA-274v-r947-v34rOpenStack Identity Keystone is vulnerable to Block delegation escalation of privilege
Modified: 7/6/2026
MEDIUM6.5PyPI
PYSEC-2026-650· CVE-2013-0270, GHSA-4ppj-4p4v-jf4pOpenStack Keystone Denial of Service vulnerability via a large HTTP request
Modified: 7/6/2026
—PyPI
PYSEC-2026-651· CVE-2013-2014, GHSA-7332-36h8-8jh8OpenStack Identity (Keystone) Denial of Service
Modified: 7/6/2026
—PyPI
PYSEC-2026-652· CVE-2013-0282, GHSA-8833-qrvm-wc3hOpenStack Keystone allows context-dependent attackers to bypass access restrictions
Modified: 7/6/2026
—PyPI
PYSEC-2026-653· CVE-2014-3621, GHSA-8v8f-vc72-pmhcOpenStack Identity Keystone Exposure of Sensitive Information
Modified: 7/6/2026
—PyPI
PYSEC-2026-654· CVE-2014-0204, GHSA-c4p9-87h3-7vr4OpenStack Identity Keystone Improper Privilege Management
Modified: 7/6/2026
—PyPI
PYSEC-2026-655· CVE-2015-3646, GHSA-jwpw-ppj5-7h4wOpenStack Keystone Logs Passwords
Modified: 7/6/2026
MEDIUM5.9PyPI
PYSEC-2026-656· CVE-2013-2255, GHSA-qh2x-hpf9-cf2gOpenStack Keystone and other components vulnerable to Improper Certificate Validation
Modified: 7/13/2026
HIGH7.5PyPI
PYSEC-2026-830· CVE-2021-38155, GHSA-4225-97pr-rr52OpenStack Keystone allows information disclosure during account locking
Modified: 7/7/2026
—PyPI
PYSEC-2026-831· CVE-2013-4477, GHSA-f889-wfwm-6p7mOpenStack Identity Keystone Privilege Escalation vulnerability
Modified: 7/7/2026
—PyPI
PYSEC-2026-832· CVE-2012-4456, GHSA-mf98-r2gf-2x3wOpenStack Keystone Improper Authentication vulnerability
Modified: 7/7/2026
—PyPI
PYSEC-2026-833· CVE-2012-4413, GHSA-mrxv-65rv-6hxqOpenStack Keystone does not invalidate existing tokens when granting or revoking roles
Modified: 7/7/2026
—PyPI
PYSEC-2026-834· CVE-2012-4457, GHSA-x8h4-xf47-pqc3OpenStack Keystone Token authorization for a user in a disabled tenant is allowed
Modified: 7/7/2026