Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-7k2c-zp2n-pbek

Summary

Aliases

alias	CVE-2026-44394

Fixed_packages

url	pkg:deb/debian/keystone@2:22.0.2-0%2Bdeb12u2
purl	pkg:deb/debian/keystone@2:22.0.2-0%2Bdeb12u2
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/keystone@2:22.0.2-0%252Bdeb12u2

url	pkg:deb/debian/keystone@2:27.0.0-3%2Bdeb13u3
purl	pkg:deb/debian/keystone@2:27.0.0-3%2Bdeb13u3
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/keystone@2:27.0.0-3%252Bdeb13u3

url	pkg:deb/debian/keystone@2:29.0.1-2?distro=trixie
purl	pkg:deb/debian/keystone@2:29.0.1-2?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/keystone@2:29.0.1-2%3Fdistro=trixie

Affected_packages

url pkg:deb/debian/keystone@2:18.0.0-3%2Bdeb11u1

purl pkg:deb/debian/keystone@2:18.0.0-3%2Bdeb11u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2d7v-rmys-akfg

vulnerability	VCID-3vnr-dg8w-4qg6

vulnerability	VCID-7k2c-zp2n-pbek

vulnerability	VCID-86d1-vsfn-ruah

vulnerability	VCID-nctt-8ksu-5ud5

vulnerability	VCID-tyh8-xsy3-efeh

vulnerability	VCID-w3tv-9q89-b3f3

vulnerability	VCID-x278-p5ca-h7d4

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/keystone@2:18.0.0-3%252Bdeb11u1

url pkg:deb/debian/keystone@2:22.0.2-0%2Bdeb12u1

purl pkg:deb/debian/keystone@2:22.0.2-0%2Bdeb12u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2d7v-rmys-akfg

vulnerability	VCID-3vnr-dg8w-4qg6

vulnerability	VCID-7k2c-zp2n-pbek

vulnerability	VCID-86d1-vsfn-ruah

vulnerability	VCID-nctt-8ksu-5ud5

vulnerability	VCID-tyh8-xsy3-efeh

vulnerability	VCID-w3tv-9q89-b3f3

vulnerability	VCID-x278-p5ca-h7d4

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/keystone@2:22.0.2-0%252Bdeb12u1

url pkg:deb/debian/keystone@2:27.0.0-3%2Bdeb13u1

purl pkg:deb/debian/keystone@2:27.0.0-3%2Bdeb13u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2d7v-rmys-akfg

vulnerability	VCID-3vnr-dg8w-4qg6

vulnerability	VCID-7k2c-zp2n-pbek

vulnerability	VCID-nctt-8ksu-5ud5

vulnerability	VCID-tyh8-xsy3-efeh

vulnerability	VCID-w3tv-9q89-b3f3

vulnerability	VCID-x278-p5ca-h7d4

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/keystone@2:27.0.0-3%252Bdeb13u1

url pkg:deb/debian/keystone@2:18.0.0-3%2Bdeb11u1?distro=trixie

purl pkg:deb/debian/keystone@2:18.0.0-3%2Bdeb11u1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2d7v-rmys-akfg

vulnerability	VCID-3vnr-dg8w-4qg6

vulnerability	VCID-7k2c-zp2n-pbek

vulnerability	VCID-86d1-vsfn-ruah

vulnerability	VCID-nctt-8ksu-5ud5

vulnerability	VCID-tyh8-xsy3-efeh

vulnerability	VCID-w3tv-9q89-b3f3

vulnerability	VCID-x278-p5ca-h7d4

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/keystone@2:18.0.0-3%252Bdeb11u1%3Fdistro=trixie

url pkg:deb/debian/keystone@2:22.0.2-0%2Bdeb12u1?distro=trixie

purl pkg:deb/debian/keystone@2:22.0.2-0%2Bdeb12u1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2d7v-rmys-akfg

vulnerability	VCID-3vnr-dg8w-4qg6

vulnerability	VCID-7k2c-zp2n-pbek

vulnerability	VCID-86d1-vsfn-ruah

vulnerability	VCID-nctt-8ksu-5ud5

vulnerability	VCID-tyh8-xsy3-efeh

vulnerability	VCID-w3tv-9q89-b3f3

vulnerability	VCID-x278-p5ca-h7d4

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/keystone@2:22.0.2-0%252Bdeb12u1%3Fdistro=trixie

url pkg:deb/debian/keystone@2:27.0.0-3%2Bdeb13u1?distro=trixie

purl pkg:deb/debian/keystone@2:27.0.0-3%2Bdeb13u1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2d7v-rmys-akfg

vulnerability	VCID-3vnr-dg8w-4qg6

vulnerability	VCID-7k2c-zp2n-pbek

vulnerability	VCID-nctt-8ksu-5ud5

vulnerability	VCID-tyh8-xsy3-efeh

vulnerability	VCID-w3tv-9q89-b3f3

vulnerability	VCID-x278-p5ca-h7d4

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/keystone@2:27.0.0-3%252Bdeb13u1%3Fdistro=trixie

References

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2026-44394

reference_id

reference_type

scores

value	0.00063
scoring_system	epss
scoring_elements	0.19951
published_at	2026-05-30T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2026-44394

reference_url

https://bugs.launchpad.net/keystone/+bug/2150379

reference_id

2150379

reference_type

scores

value	6
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T19:42:48Z/

url

https://bugs.launchpad.net/keystone/+bug/2150379

reference_url

https://security.openstack.org/ossa/OSSA-2026-015.html

reference_id

OSSA-2026-015.html

reference_type

scores

value	6
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T19:42:48Z/

url

https://security.openstack.org/ossa/OSSA-2026-015.html

Weaknesses

cwe_id	863
name	Incorrect Authorization
description	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

Exploits

Severity_range_score 6.0 - 6.0

Exploitability null

Weighted_severity null

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7k2c-zp2n-pbek

Vulnerability Instance