{"action":"Upgrade keylime to 6.4.0 or later.","affected":[{"fixed":"6.4.0","introduced":"0"}],"component":"keylime","cve_ids":["CVE-2022-1053"],"ecosystem":"PyPI","epss":0.01479,"exploited":false,"fixed_versions":["6.4.0"],"ghsa_id":"GHSA-jf66-3q76-h5p5","id":"tcs_01M5KFNNR49ZRRDYM1Z7YDR86C","modified_at":"2026-09-10T03:49:34.156499888Z","published_at":"2022-05-05T15:59:35Z","references":["https://osv.dev/vulnerability/GHSA-jf66-3q76-h5p5","https://github.com/keylime/keylime/security/advisories/GHSA-jf66-3q76-h5p5","https://nvd.nist.gov/vuln/detail/CVE-2022-1053","https://github.com/keylime/keylime/commit/bd5de712acdd77860e7dc58969181e16c7a8dc5d","https://bugzilla.redhat.com/show_bug.cgi?id=2065024","https://github.com/advisories/GHSA-jf66-3q76-h5p5","https://github.com/keylime/keylime","https://github.com/pypa/advisory-database/tree/main/vulns/keylime/PYSEC-2022-184.yaml","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A7WAKVXM7L5D2DUACV6EHA6EJNAX2GVL","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RF6QHU4UGSBATC3HOOE7OP66CYVTR7CV","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WEW2PAXO5YGLDLPG45YV2OPLJXJSCECQ"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-jf66-3q76-h5p5","url":"https://osv.dev/vulnerability/GHSA-jf66-3q76-h5p5"}],"summary":"Tenant and Verifier might not use the same registrar data"}