Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/keylime@7.9.0
Typepypi
Namespace
Namekeylime
Version7.9.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
0
url VCID-mqxg-478p-23cn
vulnerability_id VCID-mqxg-478p-23cn
summary A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vulnerability allows unauthenticated clients with network access to perform administrative operations, including listing agents, retrieving public Trusted Platform Module (TPM) data, and deleting agents, by connecting without presenting a client certificate.
references
0
reference_url https://access.redhat.com/errata/RHSA-2026:2224
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/errata/RHSA-2026:2224
1
reference_url https://access.redhat.com/errata/RHSA-2026:2225
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/errata/RHSA-2026:2225
2
reference_url https://access.redhat.com/errata/RHSA-2026:2298
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/errata/RHSA-2026:2298
3
reference_url https://access.redhat.com/security/cve/CVE-2026-1709
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/security/cve/CVE-2026-1709
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2435514
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://bugzilla.redhat.com/show_bug.cgi?id=2435514
5
reference_url https://github.com/keylime/keylime
reference_id
reference_type
scores
url https://github.com/keylime/keylime
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-1709
reference_id CVE-2026-1709
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2026-1709
7
reference_url https://github.com/advisories/GHSA-4jqp-9qjv-57m2
reference_id GHSA-4jqp-9qjv-57m2
reference_type
scores
url https://github.com/advisories/GHSA-4jqp-9qjv-57m2
8
reference_url https://github.com/keylime/keylime/security/advisories/GHSA-4jqp-9qjv-57m2
reference_id GHSA-4jqp-9qjv-57m2
reference_type
scores
url https://github.com/keylime/keylime/security/advisories/GHSA-4jqp-9qjv-57m2
fixed_packages
0
url pkg:pypi/keylime@7.12.2
purl pkg:pypi/keylime@7.12.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keylime@7.12.2
1
url pkg:pypi/keylime@7.13.1
purl pkg:pypi/keylime@7.13.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keylime@7.13.1
2
url pkg:pypi/keylime@7.12.0
purl pkg:pypi/keylime@7.12.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-af9x-v3fm-3ffh
1
vulnerability VCID-mqxg-478p-23cn
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/keylime@7.12.0
aliases CVE-2026-1709, GHSA-4jqp-9qjv-57m2, PYSEC-2026-74
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mqxg-478p-23cn
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/keylime@7.9.0