Search for packages
| purl | pkg:pypi/keystone@27.0.2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.9 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2015-3646
Aliases: GHSA-jwpw-ppj5-7h4w |
Exposure of Sensitive Information to an Unauthorized Actor OpenStack Identity (Keystone) before 2014.1.5 and 2014.2.x before 2014.2.4 logs the backend_argument … | There are no reported fixed by versions. |
|
CVE-2013-4477
|
Permission Issues The LDAP backend in OpenStack Identity (Keystone) Grizzly and Havana, when removing a role on a tenant for … | There are no reported fixed by versions. |
|
GHSA-hhq2-3832-xxcv
Aliases: CVE-2026-43001 |
OpenStack Keystone has an Incorrect Authorization Issue An issue was discovered in OpenStack Keystone 13 through 29. POST /v3/credentials did … | There are no reported fixed by versions. |
|
GHSA-gf2q-j2qq-pjf2
Aliases: CVE-2012-3542 |
OpenStack Keystone Allows Remote User Account Creation OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), … | There are no reported fixed by versions. |
|
PYSEC-2026-833
Aliases: CVE-2012-4413 GHSA-mrxv-65rv-6hxq |
OpenStack Keystone does not invalidate existing tokens when granting or revoking roles OpenStack Keystone before 2012.1.3 does not invalidate existing … | There are no reported fixed by versions. |
|
PYSEC-2026-2550
Aliases: CVE-2026-40683 GHSA-pfx2-9x9m-7ghx |
OpenStack Keystone: LDAP identity backend does not convert enabled attribute to boolean In OpenStack Keystone before 28.0.1, the LDAP identity … |
Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
PYSEC-2026-603
|
An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone federated token rescoping mechanism does not propagate the original … |
CVE-2026-44394
GHSA-whqr-fgm5-x77q |
|
PYSEC-2026-599
|
An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone application credential authentication plugin does not verify that the … |
CVE-2026-42998
GHSA-8f8m-wrvr-wcvf |
|
PYSEC-2026-600
|
An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone RBAC policy enforcer in enforce_call unconditionally merges the raw … |
CVE-2026-42999
GHSA-2r23-2g6v-2m5f |
|
PYSEC-2026-602
|
An issue was discovered in OpenStack Keystone before 29.0.2. POST /v3/credentials did not validate that the caller-supplied project_id for an … |
CVE-2026-43001
GHSA-hhq2-3832-xxcv |
|
PYSEC-2026-601
|
An issue was discovered in OpenStack Keystone before 29.0.2. When combined with an application credential impersonation vulnerability, an attacker with … |
CVE-2026-43000
GHSA-q623-f4j4-p4xj |