Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/python-keystoneclient@0.3.0
purl pkg:pypi/python-keystoneclient@0.3.0
Next non-vulnerable version 1.4.0
Latest non-vulnerable version 1.4.0
Risk 4.0
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-44u3-6h7t-dbah
Aliases:
CVE-2014-0105
GHSA-gwvq-rgqf-993f
PYSEC-2014-70
The auth_token middleware in the OpenStack Python client library for Keystone (aka python-keystoneclient) before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authenticated users to gain privileges in opportunistic circumstances via a large number of requests, related to an "interaction between eventlet and python-memcached."
0.7.0
Affected by 2 other vulnerabilities.
VCID-5st1-zx32-3yfw
Aliases:
CVE-2015-1852
GHSA-p9wq-mjh8-q72m
PYSEC-2015-30
PYSEC-2015-31
The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate, a different vulnerability than CVE-2014-7144.
1.4.0
Affected by 0 other vulnerabilities.
VCID-79rs-7766-4ycf
Aliases:
CVE-2014-7144
GHSA-7f2c-vp52-gmfw
PYSEC-2014-26
PYSEC-2014-71
OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate.
0.11.0
Affected by 1 other vulnerability.
1.2.0
Affected by 1 other vulnerability.
VCID-uexc-7rt7-hbgx
Aliases:
CVE-2013-2255
GHSA-qh2x-hpf9-cf2g
OpenStack Keystone and other components vulnerable to Improper Certificate Validation HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates.
0.4.0
Affected by 3 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-8yta-5ta1-fkfm python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass CVE-2013-2166
GHSA-c3xq-cj8f-7829
PYSEC-2019-197
VCID-d5eh-h7qr-9kbt python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass CVE-2013-2167
GHSA-9vg3-cf92-h2h7
PYSEC-2019-161

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T21:54:41.541875+00:00 GitLab Importer Affected by VCID-44u3-6h7t-dbah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2014-0105.yml 38.4.0
2026-04-16T21:53:37.506926+00:00 GitLab Importer Affected by VCID-5st1-zx32-3yfw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2015-1852.yml 38.4.0
2026-04-16T21:52:52.214816+00:00 GitLab Importer Affected by VCID-79rs-7766-4ycf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2014-7144.yml 38.4.0
2026-04-16T21:46:47.584413+00:00 GitLab Importer Affected by VCID-uexc-7rt7-hbgx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2013-2255.yml 38.4.0
2026-04-16T21:32:15.336063+00:00 GitLab Importer Fixing VCID-8yta-5ta1-fkfm https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2013-2166.yml 38.4.0
2026-04-16T21:01:22.866096+00:00 GitLab Importer Fixing VCID-d5eh-h7qr-9kbt https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2013-2167.yml 38.4.0
2026-04-16T01:56:05.539104+00:00 GHSA Importer Fixing VCID-8yta-5ta1-fkfm https://github.com/advisories/GHSA-c3xq-cj8f-7829 38.4.0
2026-04-16T01:32:00.696433+00:00 GHSA Importer Fixing VCID-d5eh-h7qr-9kbt https://github.com/advisories/GHSA-9vg3-cf92-h2h7 38.4.0
2026-04-11T23:09:59.750403+00:00 GitLab Importer Affected by VCID-44u3-6h7t-dbah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2014-0105.yml 38.3.0
2026-04-11T23:09:04.641924+00:00 GitLab Importer Affected by VCID-5st1-zx32-3yfw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2015-1852.yml 38.3.0
2026-04-11T23:08:29.199914+00:00 GitLab Importer Affected by VCID-79rs-7766-4ycf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2014-7144.yml 38.3.0
2026-04-11T23:02:35.918279+00:00 GitLab Importer Affected by VCID-uexc-7rt7-hbgx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2013-2255.yml 38.3.0
2026-04-11T22:45:32.645059+00:00 GitLab Importer Fixing VCID-8yta-5ta1-fkfm https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2013-2166.yml 38.3.0
2026-04-11T22:12:41.703154+00:00 GitLab Importer Fixing VCID-d5eh-h7qr-9kbt https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2013-2167.yml 38.3.0
2026-04-11T13:23:05.793980+00:00 GHSA Importer Fixing VCID-8yta-5ta1-fkfm https://github.com/advisories/GHSA-c3xq-cj8f-7829 38.3.0
2026-04-11T13:01:22.692152+00:00 GHSA Importer Fixing VCID-d5eh-h7qr-9kbt https://github.com/advisories/GHSA-9vg3-cf92-h2h7 38.3.0
2026-04-02T23:18:43.951742+00:00 GitLab Importer Affected by VCID-44u3-6h7t-dbah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2014-0105.yml 38.1.0
2026-04-02T23:17:46.329156+00:00 GitLab Importer Affected by VCID-5st1-zx32-3yfw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2015-1852.yml 38.1.0
2026-04-02T23:17:04.591583+00:00 GitLab Importer Affected by VCID-79rs-7766-4ycf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2014-7144.yml 38.1.0
2026-04-02T23:11:00.571037+00:00 GitLab Importer Affected by VCID-uexc-7rt7-hbgx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2013-2255.yml 38.1.0
2026-04-02T22:55:27.257638+00:00 GitLab Importer Fixing VCID-8yta-5ta1-fkfm https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2013-2166.yml 38.1.0
2026-04-02T22:25:06.152707+00:00 GitLab Importer Fixing VCID-d5eh-h7qr-9kbt https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2013-2167.yml 38.1.0
2026-04-02T14:13:37.027519+00:00 GHSA Importer Fixing VCID-8yta-5ta1-fkfm https://github.com/advisories/GHSA-c3xq-cj8f-7829 38.1.0
2026-04-02T13:53:23.779959+00:00 GHSA Importer Fixing VCID-d5eh-h7qr-9kbt https://github.com/advisories/GHSA-9vg3-cf92-h2h7 38.1.0
2026-04-01T17:39:05.427711+00:00 GitLab Importer Affected by VCID-44u3-6h7t-dbah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2014-0105.yml 38.0.0
2026-04-01T17:37:59.919896+00:00 GitLab Importer Affected by VCID-5st1-zx32-3yfw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2015-1852.yml 38.0.0
2026-04-01T17:37:13.100427+00:00 GitLab Importer Affected by VCID-79rs-7766-4ycf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2014-7144.yml 38.0.0
2026-04-01T17:30:51.164965+00:00 GitLab Importer Affected by VCID-uexc-7rt7-hbgx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2013-2255.yml 38.0.0
2026-04-01T16:43:01.423527+00:00 GitLab Importer Fixing VCID-d5eh-h7qr-9kbt https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2013-2167.yml 38.0.0
2026-04-01T15:58:00.863051+00:00 GHSA Importer Fixing VCID-d5eh-h7qr-9kbt https://github.com/advisories/GHSA-9vg3-cf92-h2h7 38.0.0
2026-04-01T15:01:17.820728+00:00 PyPI Importer Fixing VCID-8yta-5ta1-fkfm https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.0.0
2026-04-01T15:01:17.783241+00:00 PyPI Importer Fixing VCID-d5eh-h7qr-9kbt https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.0.0
2026-04-01T14:59:19.790633+00:00 PyPI Importer Affected by VCID-5st1-zx32-3yfw https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.0.0
2026-04-01T14:59:10.865884+00:00 PyPI Importer Affected by VCID-79rs-7766-4ycf https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.0.0
2026-04-01T14:58:51.662366+00:00 PyPI Importer Affected by VCID-44u3-6h7t-dbah https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.0.0
2026-04-01T13:00:37.598702+00:00 GithubOSV Importer Fixing VCID-8yta-5ta1-fkfm https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/10/GHSA-c3xq-cj8f-7829/GHSA-c3xq-cj8f-7829.json 38.0.0
2026-04-01T13:00:16.104481+00:00 GithubOSV Importer Fixing VCID-d5eh-h7qr-9kbt https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/03/GHSA-9vg3-cf92-h2h7/GHSA-9vg3-cf92-h2h7.json 38.0.0
2026-04-01T12:48:56.670071+00:00 GitLab Importer Fixing VCID-8yta-5ta1-fkfm https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/python-keystoneclient/CVE-2013-2166.yml 38.0.0
2026-04-01T12:42:09.814605+00:00 Pypa Importer Fixing VCID-8yta-5ta1-fkfm https://github.com/pypa/advisory-database/blob/main/vulns/python-keystoneclient/PYSEC-2019-197.yaml 38.0.0
2026-04-01T12:42:09.786798+00:00 Pypa Importer Fixing VCID-d5eh-h7qr-9kbt https://github.com/pypa/advisory-database/blob/main/vulns/python-keystoneclient/PYSEC-2019-161.yaml 38.0.0
2026-04-01T12:41:13.864934+00:00 Pypa Importer Affected by VCID-5st1-zx32-3yfw https://github.com/pypa/advisory-database/blob/main/vulns/python-keystoneclient/PYSEC-2015-31.yaml 38.0.0
2026-04-01T12:41:09.123786+00:00 Pypa Importer Affected by VCID-79rs-7766-4ycf https://github.com/pypa/advisory-database/blob/main/vulns/python-keystoneclient/PYSEC-2014-71.yaml 38.0.0
2026-04-01T12:40:59.657108+00:00 Pypa Importer Affected by VCID-44u3-6h7t-dbah https://github.com/pypa/advisory-database/blob/main/vulns/python-keystoneclient/PYSEC-2014-70.yaml 38.0.0