CVE-2013-2006

CVE-2013-2006 Version: https://github.com/openstack/keystone/blob/d43e2a51a1ed7adbed3c5ddf001d46bc4a824ae8...

GHSA-GF2Q-J2QQ-PJF2 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.2...

GHSA-MRXV-65RV-6HXQ vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.2...

CVE-2012-3542 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.2...

CVE-2012-4413 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.2...

CVE-2026-90460

A flaw was found in OpenStack Keystone. Tokens obtained via delegated authentication methods trusts, application credentials, OAuth1 access tokens can move a credential to an unauthorized project by supplying a new projectid in a PATCH /v3/credentials request, because only the pre-update project ...

GHSA-42VR-XJ54-VC7V vulnerabilities

Vulnerabilities for packages: openstack-glance-2025.1, airflow-core, mlrun, openstack-placement-2025.2, openstack-manila-2025.2, airflow-postgres-fips, openstack-glance-2025.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.1, openstack-octavia-2026.1, openstack-barbican-2026.1,...

CVE-2026-101918 vulnerabilities

Vulnerabilities for packages: openstack-glance-2025.1, airflow-core, mlrun, openstack-placement-2025.2, openstack-manila-2025.2, airflow-postgres-fips, openstack-glance-2025.1-fips, openstack-keystone-2026.1, openstack-keystone-2025.1, openstack-octavia-2026.1, openstack-barbican-2026.1,...

GHSA-8988-9CW3-XX77 vulnerabilities

Vulnerabilities for packages: presidio-analyzer, airflow-core, openstack-keystone-2026.1, openstack-keystone-2025.1, commercial-gitlab-cng-ee-fips, airflow, openstack-horizon-2025.1, litellm, openstack-neutron-2026.1, openstack-horizon-2026.1, tensorflow-cpu-jupyter, ansible-operator,...

GHSA-GH4C-6FX4-QH6G vulnerabilities

Vulnerabilities for packages: presidio-analyzer, airflow-core, openstack-keystone-2026.1, openstack-keystone-2025.1, commercial-gitlab-cng-ee-fips, airflow, openstack-horizon-2025.1, litellm, openstack-neutron-2026.1, openstack-horizon-2026.1, tensorflow-cpu-jupyter, ansible-operator,...

GHSA-VXQ7-64XX-V4GW vulnerabilities

Vulnerabilities for packages: presidio-analyzer, airflow-core, openstack-keystone-2026.1, openstack-keystone-2025.1, commercial-gitlab-cng-ee-fips, airflow, openstack-horizon-2025.1, litellm, openstack-neutron-2026.1, openstack-horizon-2026.1, tensorflow-cpu-jupyter, ansible-operator,...

CVE-2026-97689 vulnerabilities

Vulnerabilities for packages: presidio-analyzer, airflow-core, openstack-keystone-2026.1, openstack-keystone-2025.1, commercial-gitlab-cng-ee-fips, airflow, openstack-horizon-2025.1, litellm, openstack-neutron-2026.1, openstack-horizon-2026.1, tensorflow-cpu-jupyter, ansible-operator,...

CVE-2026-97687 vulnerabilities

Vulnerabilities for packages: presidio-analyzer, airflow-core, openstack-keystone-2026.1, openstack-keystone-2025.1, commercial-gitlab-cng-ee-fips, airflow, openstack-horizon-2025.1, litellm, openstack-neutron-2026.1, openstack-horizon-2026.1, tensorflow-cpu-jupyter, ansible-operator,...

CVE-2026-97688 vulnerabilities

Vulnerabilities for packages: presidio-analyzer, airflow-core, openstack-keystone-2026.1, openstack-keystone-2025.1, commercial-gitlab-cng-ee-fips, airflow, openstack-horizon-2025.1, litellm, openstack-neutron-2026.1, openstack-horizon-2026.1, tensorflow-cpu-jupyter, ansible-operator,...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenStack Keystone vulnerabilities (USN-8854-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8854-1 advisory. Grzegorz Grasza discovered that OpenStack Keystone did not consistently enforce restrictions...

USN-8854-1 keystone vulnerabilities

Grzegorz Grasza discovered that OpenStack Keystone did not consistently enforce restrictions for delegated authentication tokens. An authenticated attacker could possibly use this issue to create credentials or delegations that outlasted the delegated token. CVE-2026-80182 It was discovered that...

USN-8854-1: OpenStack Keystone vulnerabilities

Grzegorz Grasza discovered that OpenStack Keystone did not consistently enforce restrictions for delegated authentication tokens. An authenticated attacker could possibly use this issue to create credentials or delegations that outlasted the delegated token. CVE-2026-80182 It was discovered that...

Linux Distros Unpatched Vulnerability : CVE-2026-90460

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated authentication methods EC2 credentials, application credentials, OAut...

DEBIAN-CVE-2026-90460

An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated authentication methods EC2 credentials, application credentials, OAuth1 access tokens, and trusts are not blocked from creating, modifying, or deleting credentials via the /v3/credentials API. EC2-derived...

CVE-2026-90460

An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated authentication methods EC2 credentials, application credentials, OAuth1 access tokens, and trusts are not blocked from creating, modifying, or deleting credentials via the /v3/credentials API. EC2-derived...