MAL-2025-19561 Malicious code in ember-i87hx-31r2h-keystone-project (npm)

The package ember-i87hx-31r2h-keystone-project was found to contain malicious code...

MAL-2025-24436 Malicious code in keystone_h41zw_fglov_rainbow (npm)

The package keystoneh41zwfglovrainbow was found to contain malicious code...

Malicious code in keystone-4r8qt-gojpm-fjord-project (npm)

The package keystone-4r8qt-gojpm-fjord-project was found to contain malicious code...

Malicious code in keystone-quzon-wwl1d-yonder-project (npm)

The package keystone-quzon-wwl1d-yonder-project was found to contain malicious code...

Malicious code in keystone-4rmyi-tz6yz-nebula-project (npm)

The package keystone-4rmyi-tz6yz-nebula-project was found to contain malicious code...

Malicious code in xenith-6n82k-vye3a-keystone-project (npm)

The package xenith-6n82k-vye3a-keystone-project was found to contain malicious code...

MAL-2025-24430 Malicious code in keystone-8xuj0-kbwlm-xenith-project (npm)

The package keystone-8xuj0-kbwlm-xenith-project was found to contain malicious code...

Malicious code in keystone-q9lbl-2l4ff-quiver-project (npm)

The package keystone-q9lbl-2l4ff-quiver-project was found to contain malicious code...

MAL-2025-24432 Malicious code in keystone-q9lbl-2l4ff-quiver-project (npm)

The package keystone-q9lbl-2l4ff-quiver-project was found to contain malicious code...

MAL-2025-40055 Malicious code in xylophone-q097e-z7kw6-keystone-project (npm)

The package xylophone-q097e-z7kw6-keystone-project was found to contain malicious code...

TencentOS Server 4: openstack-keystone (TSSA-2025:0055)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0055 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: openstack-keystone (TSSA-2025:0054)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0054 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2022-29354

An arbitrary file upload vulnerability in the file upload module of Keystone v4.2.1 allows attackers to execute arbitrary code via a crafted file...

CVE-2021-38155

OpenStack Keystone 10.x through 16.x before 16.0.2, 17.x before 17.0.1, 18.x before 18.0.1, and 19.x before 19.0.1 allows information disclosure during account locking related to PCI DSS features. By guessing the name of an account and failing to authenticate multiple times, any unauthenticated...

CVE-2021-32624

Keystone 5 is an open source CMS platform to build Node.js applications. This security advisory relates to a newly discovered capability in our query infrastructure to directly or indirectly expose the values of private fields, bypassing the configured access control. This is an access control...

CVE-2020-36404

Keystone Engine 0.9.2 has an invalid free in llvmks::SmallVectorImpl::SmallVectorImpl...

CVE-2020-36405

Keystone Engine 0.9.2 has a use-after-free in llvmks::X86Operand::getToken...

kernel: PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()

A NULL pointer dereference was found in the Linux kernel in case of DT error in kspciesetuprcappregs. This may lead to a crash...

CVE-2025-46720

Keystone is a content management system for Node.js. Prior to version 6.5.0, field.isFilterable access control can be bypassed in update and delete mutations by adding additional unique filters. These filters can be used as an oracle to probe the existence or value of otherwise unreadable fields...

CVE-2025-46720

Keystone is a content management system for Node.js. Prior to version 6.5.0, field.isFilterable access control can be bypassed in update and delete mutations by adding additional unique filters. These filters can be used as an oracle to probe the existence or value of otherwise unreadable fields...