Search for packages
| purl | pkg:deb/debian/python-keystonemiddleware@1.0.0-3?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-79rs-7766-4ycf | OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate. |
CVE-2014-7144
GHSA-7f2c-vp52-gmfw PYSEC-2014-26 PYSEC-2014-71 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T13:13:55.740061+00:00 | Debian Importer | Fixing | VCID-79rs-7766-4ycf | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-13T09:06:35.847827+00:00 | Debian Importer | Fixing | VCID-79rs-7766-4ycf | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-03T07:50:49.479534+00:00 | Debian Importer | Fixing | VCID-79rs-7766-4ycf | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |