Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/python-keystoneclient@0.3.2
purl pkg:pypi/python-keystoneclient@0.3.2
Next non-vulnerable version 1.4.0
Latest non-vulnerable version 1.4.0
Risk 4.0
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-44u3-6h7t-dbah
Aliases:
CVE-2014-0105
GHSA-gwvq-rgqf-993f
PYSEC-2014-70
The auth_token middleware in the OpenStack Python client library for Keystone (aka python-keystoneclient) before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authenticated users to gain privileges in opportunistic circumstances via a large number of requests, related to an "interaction between eventlet and python-memcached."
0.7.0
Affected by 2 other vulnerabilities.
VCID-5st1-zx32-3yfw
Aliases:
CVE-2015-1852
GHSA-p9wq-mjh8-q72m
PYSEC-2015-30
PYSEC-2015-31
The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate, a different vulnerability than CVE-2014-7144.
1.4.0
Affected by 0 other vulnerabilities.
VCID-79rs-7766-4ycf
Aliases:
CVE-2014-7144
GHSA-7f2c-vp52-gmfw
PYSEC-2014-26
PYSEC-2014-71
OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate.
0.11.0
Affected by 1 other vulnerability.
1.2.0
Affected by 1 other vulnerability.
VCID-uexc-7rt7-hbgx
Aliases:
CVE-2013-2255
GHSA-qh2x-hpf9-cf2g
OpenStack Keystone and other components vulnerable to Improper Certificate Validation HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates.
0.4.0
Affected by 3 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T21:54:41.548504+00:00 GitLab Importer Affected by VCID-44u3-6h7t-dbah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2014-0105.yml 38.4.0
2026-04-16T21:53:37.513490+00:00 GitLab Importer Affected by VCID-5st1-zx32-3yfw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2015-1852.yml 38.4.0
2026-04-16T21:52:52.221480+00:00 GitLab Importer Affected by VCID-79rs-7766-4ycf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2014-7144.yml 38.4.0
2026-04-16T21:46:47.591459+00:00 GitLab Importer Affected by VCID-uexc-7rt7-hbgx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2013-2255.yml 38.4.0
2026-04-11T23:09:59.757640+00:00 GitLab Importer Affected by VCID-44u3-6h7t-dbah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2014-0105.yml 38.3.0
2026-04-11T23:09:04.645045+00:00 GitLab Importer Affected by VCID-5st1-zx32-3yfw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2015-1852.yml 38.3.0
2026-04-11T23:08:29.203109+00:00 GitLab Importer Affected by VCID-79rs-7766-4ycf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2014-7144.yml 38.3.0
2026-04-11T23:02:35.925711+00:00 GitLab Importer Affected by VCID-uexc-7rt7-hbgx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2013-2255.yml 38.3.0
2026-04-02T23:18:43.958349+00:00 GitLab Importer Affected by VCID-44u3-6h7t-dbah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2014-0105.yml 38.1.0
2026-04-02T23:17:46.335735+00:00 GitLab Importer Affected by VCID-5st1-zx32-3yfw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2015-1852.yml 38.1.0
2026-04-02T23:17:04.598558+00:00 GitLab Importer Affected by VCID-79rs-7766-4ycf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2014-7144.yml 38.1.0
2026-04-02T23:11:00.577614+00:00 GitLab Importer Affected by VCID-uexc-7rt7-hbgx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2013-2255.yml 38.1.0
2026-04-01T17:39:05.434449+00:00 GitLab Importer Affected by VCID-44u3-6h7t-dbah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2014-0105.yml 38.0.0
2026-04-01T17:37:59.926629+00:00 GitLab Importer Affected by VCID-5st1-zx32-3yfw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2015-1852.yml 38.0.0
2026-04-01T17:37:13.107897+00:00 GitLab Importer Affected by VCID-79rs-7766-4ycf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2014-7144.yml 38.0.0
2026-04-01T17:30:51.172552+00:00 GitLab Importer Affected by VCID-uexc-7rt7-hbgx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2013-2255.yml 38.0.0
2026-04-01T14:59:19.797745+00:00 PyPI Importer Affected by VCID-5st1-zx32-3yfw https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.0.0
2026-04-01T14:59:10.872674+00:00 PyPI Importer Affected by VCID-79rs-7766-4ycf https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.0.0
2026-04-01T14:58:51.669156+00:00 PyPI Importer Affected by VCID-44u3-6h7t-dbah https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.0.0
2026-04-01T12:41:13.868211+00:00 Pypa Importer Affected by VCID-5st1-zx32-3yfw https://github.com/pypa/advisory-database/blob/main/vulns/python-keystoneclient/PYSEC-2015-31.yaml 38.0.0
2026-04-01T12:41:09.127145+00:00 Pypa Importer Affected by VCID-79rs-7766-4ycf https://github.com/pypa/advisory-database/blob/main/vulns/python-keystoneclient/PYSEC-2014-71.yaml 38.0.0
2026-04-01T12:40:59.661318+00:00 Pypa Importer Affected by VCID-44u3-6h7t-dbah https://github.com/pypa/advisory-database/blob/main/vulns/python-keystoneclient/PYSEC-2014-70.yaml 38.0.0