Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenStack Platform 17.1/rhosp-rhel9/openstack-keystone
Red Hat
· Package
12 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation
CVE-2026-49264 · GHSA-HJ66-6F7G-4R5V
Version ranges need review.
oauthlib
Confidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-builder-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-13
Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208)
CVE-2026-49265 · GHSA-XPV3-W29H-X7CV
Version ranges need review.
oauthlib
Confidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-builder-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-13
PyJWT: PyJWKClient follows redirects when fetching JWKS
CVE-2026-102267 · GHSA-9V7F-9G4P-FFGJ
Version ranges need review.
pyjwt
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
High
Fix reported
2026-10-01
PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse
CVE-2026-103001 · GHSA-GVP8-978C-RX2Q
Version ranges need review.
pyjwt
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
Medium
No fix reported
2026-10-01
sqlparse: Quadratic O(n²) DoS in group_comments
CVE-2026-71491 · GHSA-F2FF-P2WW-7P4P
Version ranges need review.
sqlparse
Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8
PyPI
Red Hat
High
Fix reported
2026-09-10
OpenStack Keystone has an Incorrect Authorization issue
CVE-2026-43000 · GHSA-Q623-F4J4-P4XJ
Version ranges need review.
keystone
Red Hat OpenStack Platform 16.2/openstack-keystone
PyPI
Red Hat
Medium
Fix reported
2026-09-10
OpenStack Keystone has an Authorization Bypass
CVE-2026-42999 · GHSA-2R23-2G6V-2M5F
Version ranges need review.
keystone
Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-keystone
PyPI
Red Hat
Medium
Fix reported
2026-09-10
OpenStack Keystone doesn't verify that the user supplied in the authentication request matches the owner of the application credential
CVE-2026-42998 · GHSA-8F8M-WRVR-WCVF
Version ranges need review.
keystone
Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-keystone
PyPI
Red Hat
Medium
Fix reported
2026-09-10
OpenStack Keystone's federated token rescoping mechanism doesn't propagate the original token's expiry to the newly issued token
CVE-2026-44394 · GHSA-WHQR-FGM5-X77Q
Version ranges need review.
keystone
Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-keystone
PyPI
Red Hat
Medium
Fix reported
2026-09-10
REXML has DoS condition when parsing malformed XML file
CVE-2025-58767 · GHSA-C2F4-JGMC-Q2R5
Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-operator-bundle
Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel9-operator
Red Hat
RubyGems
Low
Fix reported
2026-09-10
OpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization.
CVE-2025-65073 · GHSA-HCQG-5G63-7J9H
Version ranges need review.
keystone
Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-keystone
PyPI
Red Hat
High
Fix reported
2026-07-07
keystone: OpenStack Keystone: Information disclosure via improper handling of domain IDs in role assignment listings
CVE-2026-80183
Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-keystone
Red Hat OpenStack Platform 16.2/openstack-keystone
Red Hat
Medium
No fix reported
Not recorded
