Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenStack Platform 18.0/openstack-keystone
Red Hat
· Package
10 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
OpenStack Keystone has an Incorrect Authorization issue
CVE-2026-43000 · GHSA-Q623-F4J4-P4XJ
Version ranges need review.
keystone
Red Hat OpenStack Platform 16.2/openstack-keystone
PyPI
Red Hat
Medium
Fix reported
2026-09-10
OpenStack Keystone has an Authorization Bypass
CVE-2026-42999 · GHSA-2R23-2G6V-2M5F
Version ranges need review.
keystone
Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-keystone
PyPI
Red Hat
Medium
Fix reported
2026-09-10
OpenStack Keystone doesn't verify that the user supplied in the authentication request matches the owner of the application credential
CVE-2026-42998 · GHSA-8F8M-WRVR-WCVF
Version ranges need review.
keystone
Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-keystone
PyPI
Red Hat
Medium
Fix reported
2026-09-10
OpenStack Keystone's federated token rescoping mechanism doesn't propagate the original token's expiry to the newly issued token
CVE-2026-44394 · GHSA-WHQR-FGM5-X77Q
Version ranges need review.
keystone
Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-keystone
PyPI
Red Hat
Medium
Fix reported
2026-09-10
OpenStack improperly deletes access rules
CVE-2023-6110 · GHSA-2PPF-2M6F-6V6F
Version ranges need review.
python-openstackclient
Red Hat OpenStack Platform 16.1/openstack-keystone
PyPI
Red Hat
Medium
Fix reported
2026-07-07
OpenStack Keystone Denial of Service vulnerability via a large HTTP request
CVE-2013-0270 · GHSA-4PPJ-4P4V-JF4P
Version ranges need review.
keystone
Red Hat OpenStack Platform 13 (Queens)/redhat-user-workloads/openstack-keystone
PyPI
Red Hat
Medium
Fix reported
2026-07-06
OpenStack Keystone intended authorization restrictions bypass
CVE-2012-5571 · GHSA-QVPR-QM6W-6RCC
keystone
Red Hat OpenStack Platform 13 (Queens)/redhat-user-workloads/openstack-keystone
PyPI
Red Hat
Medium
Fix reported
2026-06-10
keystone: keystone: Delegated token scope restrictions not consistently enforced across trust, OAuth1, and application credential endpoints
CVE-2026-80182
Red Hat OpenStack Platform 16.2/openstack-keystone
Red Hat OpenStack Platform 17.1/openstack-keystone
Red Hat
High
No fix reported
Not recorded
keystone: OpenStack Keystone: Information disclosure via improper handling of domain IDs in role assignment listings
CVE-2026-80183
Red Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-keystone
Red Hat OpenStack Platform 16.2/openstack-keystone
Red Hat
Medium
No fix reported
Not recorded
openstack-keystone: openstack-keystone: PATCH /v3/credentials accepts unauthorized post-update project_id; EC2-derived tokens bypass delegation scope check
CVE-2026-90460
Red Hat OpenStack Platform 13 (Queens)/openstack-keystone
Red Hat OpenStack Platform 16.2/openstack-keystone
Red Hat
High
No fix reported
Not recorded
