Security
فارسی
All products

Red Hat OpenStack Platform 18.0/rhoso/openstack-keystone-rhel9

Red Hat · Package
15 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
dnspython dns.name.from_wire_parser() excessive CPU useCVE-2026-114605 · GHSA-45C3-73F7-PV4M dnspythonAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 PyPIRed Hat High Fix reported
Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generationCVE-2026-49264 · GHSA-HJ66-6F7G-4R5VVersion ranges need review. oauthlibConfidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-builder-rhel9 PyPIRed Hat Medium Fix reported
Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208)CVE-2026-49265 · GHSA-XPV3-W29H-X7CVVersion ranges need review. oauthlibConfidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-builder-rhel9 PyPIRed Hat Medium Fix reported
PyJWT: PyJWKClient follows redirects when fetching JWKSCVE-2026-102267 · GHSA-9V7F-9G4P-FFGJVersion ranges need review. pyjwtAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 PyPIRed Hat High Fix reported
PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuseCVE-2026-103001 · GHSA-GVP8-978C-RX2QVersion ranges need review. pyjwtAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 PyPIRed Hat Medium No fix reported
WebOb: Open redirect in Location header normalization via leading C0 control / space charactersCVE-2026-54770 · GHSA-6HX8-3WJJ-GR8GVersion ranges need review. webobRed Hat Ceph Storage 4/python-webob PyPIRed Hat Medium Fix reported
sqlparse: Quadratic O(n²) DoS in group_commentsCVE-2026-71491 · GHSA-F2FF-P2WW-7P4PVersion ranges need review. sqlparseRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat High Fix reported
sqlparse: Generated Python and PHP snippets allow SQL string breakout through unescaped backslashesCVE-2026-59894 · GHSA-3496-9G83-7V6XVersion ranges need review. sqlparseRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat Medium Fix reported
OpenStack Keystone has an Incorrect Authorization issueCVE-2026-43000 · GHSA-Q623-F4J4-P4XJVersion ranges need review. keystoneRed Hat OpenStack Platform 16.2/openstack-keystone PyPIRed Hat Medium Fix reported
OpenStack Keystone has an Authorization BypassCVE-2026-42999 · GHSA-2R23-2G6V-2M5FVersion ranges need review. keystoneRed Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-keystone PyPIRed Hat Medium Fix reported
OpenStack Keystone doesn't verify that the user supplied in the authentication request matches the owner of the application credentialCVE-2026-42998 · GHSA-8F8M-WRVR-WCVFVersion ranges need review. keystoneRed Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-keystone PyPIRed Hat Medium Fix reported
sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)CVE-2026-59893 · GHSA-PRG7-HCFM-MFCRVersion ranges need review. sqlparseRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat High Fix reported
sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps triggerCVE-2026-54284 · GHSA-PWGV-4X5Q-6M9FVersion ranges need review. sqlparseRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat High Fix reported
OpenStack Keystone's federated token rescoping mechanism doesn't propagate the original token's expiry to the newly issued tokenCVE-2026-44394 · GHSA-WHQR-FGM5-X77QVersion ranges need review. keystoneRed Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-keystone PyPIRed Hat Medium Fix reported
OpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization.CVE-2025-65073 · GHSA-HCQG-5G63-7J9HVersion ranges need review. keystoneRed Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-keystone PyPIRed Hat High Fix reported