GHSA-4jqp-9qjv-57m2
Critical · 9.4CVSS
9.4
EPSS
—
Published
Feb 6, 2026
CISA due date
—
The record
Keylime Missing Authentication for Critical Function and Improper Authentication
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | keylime | 7.12.0 | 7.12.2 |
| PyPI | keylime | 7.13.0 | 7.13.1 |
Related vulnerabilities
- CVE-2026-1709 A flaw was found in Keylime. Same vulnerability
- GHSA-27jc-jmp8-qfw5 Duplicate Advisory: Keylime Missing Authentication for Critical Function and Improper… Also affects keylime
- GHSA-xh5w-g8gq-r3v9 Keylime allows users to register new agents by recycling existing UUIDs when using… Also affects keylime
- CVE-2025-13609 A vulnerability has been identified in keylime where an attacker can exploit this flaw by… Also affects keylime
- CVE-2026-96375 Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the… CWE-295
- CVE-2026-87944 Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider… CWE-295
- CVE-2026-114642 Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 stores its NTLM/Kerberos backend… CWE-295
- CVE-2026-114406 The system certificate authority (CA) store in Red Hat products, distributed via… CWE-295