CVE-2026-43001

An issue was discovered in OpenStack Keystone before 29.0.2. POST /v3/credentials did not validate that the caller-supplied projectid for an EC2-type credential matched the project of the authenticating application credential. This allowed an attacker holding an unrestricted application credentia...

PT-2023-27002

Name of the Vulnerable Software and Affected Versions Sentry versions 10.0.0 through 23.7.2 Description The issue allows an attacker with sufficient client-side exploits to retrieve a valid access token for another user during the OAuth token exchange due to incorrect credential validation. The...