PyPI/keylime CVE-2025-1057: medium 4.3
Keylime registrar is vulnerable to Denial-of-Service attack when updated to version 7.12.0
Action: Upgrade keylime to 7.12.1 or later.
pip install keylime==7.12.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.12.0 | 7.12.1 | - |
Fixed versions
| 7.12.1 |
Sources
- osv: PYSEC-2026-1488
- https://github.com/keylime/keylime/security/advisories/GHSA-9jxq-5x44-gx23
- https://nvd.nist.gov/vuln/detail/CVE-2025-1057
- https://github.com/keylime/keylime/commit/e08b10d86c3717006774e787542c190e2ba24fc7
- https://access.redhat.com/security/cve/CVE-2025-1057
- https://bugzilla.redhat.com/show_bug.cgi?id=2343894
- https://github.com/keylime/keylime
- https://pypi.org/project/keylime
- https://github.com/advisories/GHSA-9jxq-5x44-gx23
CVE-2025-1057 · published · modified · JSON