CVE-2026-40683
2 advisories.
PyPI/keystone CVE-2026-40683: high 7.7
OpenStack Keystone: LDAP identity backend does not convert enabled attribute to boolean
Action: Upgrade keystone to 28.0.1 or later.
pip install keystone==28.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 28.0.1 | - |
Fixed versions
| 28.0.1 |
Sources
- osv: GHSA-pfx2-9x9m-7ghx
- https://nvd.nist.gov/vuln/detail/CVE-2026-40683
- https://bugs.launchpad.net/keystone/+bug/2121152
- https://bugs.launchpad.net/keystone/+bug/2141713
- https://github.com/openstack/keystone
- https://review.opendev.org/958205
- https://www.openwall.com/lists/oss-security/2026/04/14/9
CVE-2026-40683 · published · modified · JSON
PyPI/keystone CVE-2026-40683: high 7.7
OpenStack Keystone: LDAP identity backend does not convert enabled attribute to boolean
Action: Upgrade keystone to 28.0.1 or later.
pip install keystone==28.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 28.0.1 | - |
Fixed versions
| 28.0.1 |
Sources
- osv: PYSEC-2026-2550
- https://nvd.nist.gov/vuln/detail/CVE-2026-40683
- https://bugs.launchpad.net/keystone/+bug/2121152
- https://bugs.launchpad.net/keystone/+bug/2141713
- https://github.com/openstack/keystone
- https://review.opendev.org/958205
- https://www.openwall.com/lists/oss-security/2026/04/14/9
- https://pypi.org/project/keystone
- https://github.com/advisories/GHSA-pfx2-9x9m-7ghx
CVE-2026-40683 · published · modified · JSON