{"action":"Upgrade keylime to 6.4.0 or later.","affected":[{"fixed":"6.4.0","introduced":"0"}],"component":"keylime","cve_ids":["CVE-2022-1053"],"ecosystem":"PyPI","epss":0.01479,"exploited":false,"fixed_versions":["6.4.0"],"ghsa_id":"GHSA-jf66-3q76-h5p5","id":"tcs_01M5KGGCZQP6THN5CC957PJ7N0","modified_at":"2026-05-05T15:26:03.587915176Z","published_at":"2022-05-06T17:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-184","https://bugzilla.redhat.com/show_bug.cgi?id=2065024,","https://github.com/keylime/keylime/commit/bd5de712acdd77860e7dc58969181e16c7a8dc5d","https://github.com/keylime/keylime/security/advisories/GHSA-jf66-3q76-h5p5,","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A7WAKVXM7L5D2DUACV6EHA6EJNAX2GVL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WEW2PAXO5YGLDLPG45YV2OPLJXJSCECQ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RF6QHU4UGSBATC3HOOE7OP66CYVTR7CV/","https://github.com/advisories/GHSA-jf66-3q76-h5p5"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-184","url":"https://osv.dev/vulnerability/PYSEC-2022-184"}],"summary":"Keylime does not enforce that the agent registrar data is the same when the tenant uses it for validation of the EK and identity quote and the verifier for validating the integrity quote. This allows"}