{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"21.0.0"}],"component":"keystone","cve_ids":["CVE-2021-3563"],"ecosystem":"PyPI","epss":0.01863,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-cc99-whm5-mmq3","id":"tcs_01M5KFCPB332QM0JFB9E70V084","modified_at":"2026-10-27T17:00:03.993074090Z","published_at":"2022-08-27T00:00:44Z","references":["https://osv.dev/vulnerability/GHSA-cc99-whm5-mmq3","https://nvd.nist.gov/vuln/detail/CVE-2021-3563","https://access.redhat.com/security/cve/CVE-2021-3563","https://bugs.launchpad.net/ossa/+bug/1901891","https://bugzilla.redhat.com/show_bug.cgi?id=1962908","https://lists.debian.org/debian-lts-announce/2024/01/msg00007.html","https://opendev.org/openstack/keystone","https://opendev.org/openstack/keystone/commit/7859ed26003858ebfd9a5e866b43f1a6a9e83dca","https://review.opendev.org/c/openstack/keystone/+/803641","https://review.opendev.org/c/openstack/keystone/+/828595","https://review.opendev.org/c/openstack/keystone/+/856489","https://security-tracker.debian.org/tracker/CVE-2021-3563","https://github.com/pypa/advisory-database/tree/main/vulns/keystone/PYSEC-2026-370.yaml","https://pypi.org/project/keystone"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-cc99-whm5-mmq3","url":"https://osv.dev/vulnerability/GHSA-cc99-whm5-mmq3"}],"summary":"Openstack Keystone Incorrect Authorization vulnerability"}