PyPI/keystone CVE-2026-43001: high 7.9, EPSS 0.47%
OpenStack Keystone has an Incorrect Authorization Issue
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 13.0.0 | - | 29.0.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-hhq2-3832-xxcv
- https://nvd.nist.gov/vuln/detail/CVE-2026-43001
- https://bugs.launchpad.net/keystone/+bug/2149775
- https://review.opendev.org/c/openstack/keystone
- https://review.opendev.org/c/openstack/keystone/+/985804
- https://security.openstack.org/ossa/OSSA-2026-015.html
CVE-2026-43001 · published · modified · JSON