[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-33551":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T06:21:05.817Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":30,"duplicate_of":9,"upstream":33,"downstream":34,"duplicates":45,"related":46,"reserved_at":9,"published_at":47,"modified_at":48,"state":49,"summary":50,"references_raw":58,"kevs":99,"epss":100,"epss_history":103,"metrics":367,"affected":382},"CVE-2026-33551","An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted application credentials can create EC2 credentials. By using a restricted application credential to call the EC2 credential creation API, an authenticated user with only a reader role may obtain an EC2/S3 credential that carries the full set of the parent user's S3 permissions, effectively bypassing the role restrictions imposed on the application credential. Only deployments that use restricted application credentials in combination with the EC2/S3 compatibility API (swift3 / s3api) are affected.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-863","Incorrect Authorization","The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.","weakness","Incomplete","Class","High",[],[21],{"_key":22,"name":23,"source":24,"url":25,"maturity":26,"reliability_score":27,"verified":28,"type":9,"platforms":29,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_494487794902F20A","Exploit Reference (bugs.launchpad.net)","reference","https://bugs.launchpad.net/keystone/+bug/2142138","unknown",0.2,false,[],[31,32],"GHSA-4phw-6824-6cfp","PYSEC-2026-202",[],[35,37,39,41,43],{"_key":36},"DEBIAN-CVE-2026-33551",{"_key":38},"UBUNTU-CVE-2026-33551",{"_key":40},"USN-8433-1",{"_key":42},"RHSA-2026:28044",{"_key":44},"RHSA-2026:39808",[],[],"2026-04-10T00:00:00.000Z","2026-04-10T13:50:43.389Z","Analyzed",{"cisa_kev":28,"cisa_ransomware":28,"cisa_vendor":9,"epss_severity":51,"epss_score":52,"severity":53,"severity_score":54,"severity_version":55,"severity_source":56,"severity_vector":57,"severity_status":49},"low",0.0022,"medium",5.3,"v3.1","nvd","CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",[59,68,75,81,86,91,95],{"url":25,"sources":60,"tags":63},[61,56,62],"cve.org","osv_pypi",[64,65,66,67],"WEB","Exploit","Issue Tracking","REPORT",{"url":69,"sources":70,"tags":71},"https://security.openstack.org/ossa/OSSA-2026-005.html",[61,56,62],[64,72,73,74],"Vendor Advisory","Patch","FIX",{"url":76,"sources":77,"tags":78},"http://www.openwall.com/lists/oss-security/2026/04/07/12",[61,56,62],[64,79,73,80,74],"Mailing List","Third Party Advisory",{"url":82,"sources":83,"tags":84},"https://nvd.nist.gov/vuln/detail/CVE-2026-33551",[62],[85],"Advisory",{"url":87,"sources":88,"tags":89},"https://github.com/openstack/keystone",[62],[90],"PACKAGE",{"url":92,"sources":93,"tags":94},"https://github.com/pypa/advisory-database/tree/main/vulns/keystone/PYSEC-2026-202.yaml",[62],[64],{"url":96,"sources":97,"tags":98},"https://github.com/advisories/GHSA-4phw-6824-6cfp",[62],[85],[],{"date":101,"score":52,"percentile":102},"2026-07-05",0.12412,[104,108,111,114,117,120,123,127,130,133,136,139,142,145,148,151,154,157,160,163,166,169,172,175,178,181,184,187,190,193,196,199,202,206,209,212,215,218,221,224,227,230,233,236,238,241,244,247,250,253,256,259,262,265,269,272,275,278,282,285,288,291,294,297,300,303,306,310,313,316,319,322,325,328,331,334,337,340,343,346,349,352,355,358,361,364,366],{"date":105,"score":106,"percentile":107},"2026-04-10",0.0002,0.05518,{"date":109,"score":106,"percentile":110},"2026-04-11",0.05506,{"date":112,"score":106,"percentile":113},"2026-04-12",0.05493,{"date":115,"score":106,"percentile":116},"2026-04-13",0.05486,{"date":118,"score":106,"percentile":119},"2026-04-14",0.05422,{"date":121,"score":106,"percentile":122},"2026-04-15",0.05427,{"date":124,"score":125,"percentile":126},"2026-04-16",0.00023,0.06101,{"date":128,"score":125,"percentile":129},"2026-04-17",0.0611,{"date":131,"score":125,"percentile":132},"2026-04-18",0.06112,{"date":134,"score":125,"percentile":135},"2026-04-19",0.06099,{"date":137,"score":125,"percentile":138},"2026-04-20",0.0608,{"date":140,"score":125,"percentile":141},"2026-04-21",0.06264,{"date":143,"score":125,"percentile":144},"2026-04-22",0.06269,{"date":146,"score":125,"percentile":147},"2026-04-23",0.06288,{"date":149,"score":125,"percentile":150},"2026-04-24",0.06282,{"date":152,"score":125,"percentile":153},"2026-04-25",0.06315,{"date":155,"score":125,"percentile":156},"2026-04-26",0.06308,{"date":158,"score":125,"percentile":159},"2026-04-27",0.06299,{"date":161,"score":125,"percentile":162},"2026-04-28",0.06302,{"date":164,"score":125,"percentile":165},"2026-04-29",0.0632,{"date":167,"score":125,"percentile":168},"2026-04-30",0.06326,{"date":170,"score":125,"percentile":171},"2026-05-01",0.06322,{"date":173,"score":125,"percentile":174},"2026-05-02",0.06348,{"date":176,"score":125,"percentile":177},"2026-05-03",0.06346,{"date":179,"score":125,"percentile":180},"2026-05-04",0.06331,{"date":182,"score":125,"percentile":183},"2026-05-05",0.06337,{"date":185,"score":125,"percentile":186},"2026-05-06",0.06363,{"date":188,"score":125,"percentile":189},"2026-05-07",0.0645,{"date":191,"score":125,"percentile":192},"2026-05-08",0.06481,{"date":194,"score":125,"percentile":195},"2026-05-09",0.06525,{"date":197,"score":125,"percentile":198},"2026-05-10",0.06543,{"date":200,"score":125,"percentile":201},"2026-05-11",0.06537,{"date":203,"score":204,"percentile":205},"2026-05-12",0.00026,0.07527,{"date":207,"score":204,"percentile":208},"2026-05-13",0.07532,{"date":210,"score":204,"percentile":211},"2026-05-14",0.07564,{"date":213,"score":204,"percentile":214},"2026-05-15",0.07563,{"date":216,"score":204,"percentile":217},"2026-05-16",0.07582,{"date":219,"score":204,"percentile":220},"2026-05-17",0.07576,{"date":222,"score":204,"percentile":223},"2026-05-18",0.07536,{"date":225,"score":204,"percentile":226},"2026-05-19",0.07507,{"date":228,"score":204,"percentile":229},"2026-05-20",0.07498,{"date":231,"score":204,"percentile":232},"2026-05-21",0.07489,{"date":234,"score":204,"percentile":235},"2026-05-22",0.07783,{"date":237,"score":204,"percentile":235},"2026-05-23",{"date":239,"score":204,"percentile":240},"2026-05-24",0.07791,{"date":242,"score":204,"percentile":243},"2026-05-25",0.07774,{"date":245,"score":204,"percentile":246},"2026-05-26",0.07763,{"date":248,"score":204,"percentile":249},"2026-05-27",0.07809,{"date":251,"score":204,"percentile":252},"2026-05-28",0.07961,{"date":254,"score":204,"percentile":255},"2026-05-29",0.07979,{"date":257,"score":204,"percentile":258},"2026-05-30",0.07971,{"date":260,"score":204,"percentile":261},"2026-05-31",0.07952,{"date":263,"score":204,"percentile":264},"2026-06-01",0.07934,{"date":266,"score":267,"percentile":268},"2026-06-02",0.00033,0.09977,{"date":270,"score":267,"percentile":271},"2026-06-03",0.09942,{"date":273,"score":267,"percentile":274},"2026-06-04",0.09954,{"date":276,"score":267,"percentile":277},"2026-06-05",0.09998,{"date":279,"score":280,"percentile":281},"2026-06-06",0.00031,0.09353,{"date":283,"score":280,"percentile":284},"2026-06-07",0.09338,{"date":286,"score":280,"percentile":287},"2026-06-08",0.09278,{"date":289,"score":280,"percentile":290},"2026-06-09",0.09311,{"date":292,"score":280,"percentile":293},"2026-06-10",0.09352,{"date":295,"score":280,"percentile":296},"2026-06-11",0.09396,{"date":298,"score":280,"percentile":299},"2026-06-12",0.09449,{"date":301,"score":280,"percentile":302},"2026-06-13",0.09443,{"date":304,"score":280,"percentile":305},"2026-06-14",0.09431,{"date":307,"score":308,"percentile":309},"2026-06-15",0.00211,0.1129,{"date":311,"score":308,"percentile":312},"2026-06-16",0.1131,{"date":314,"score":308,"percentile":315},"2026-06-17",0.11306,{"date":317,"score":308,"percentile":318},"2026-06-18",0.11304,{"date":320,"score":308,"percentile":321},"2026-06-19",0.11277,{"date":323,"score":308,"percentile":324},"2026-06-20",0.11268,{"date":326,"score":308,"percentile":327},"2026-06-21",0.1123,{"date":329,"score":308,"percentile":330},"2026-06-22",0.1122,{"date":332,"score":52,"percentile":333},"2026-06-23",0.12234,{"date":335,"score":52,"percentile":336},"2026-06-24",0.12249,{"date":338,"score":52,"percentile":339},"2026-06-25",0.12341,{"date":341,"score":52,"percentile":342},"2026-06-26",0.12362,{"date":344,"score":52,"percentile":345},"2026-06-27",0.12395,{"date":347,"score":52,"percentile":348},"2026-06-28",0.12361,{"date":350,"score":52,"percentile":351},"2026-06-29",0.1236,{"date":353,"score":52,"percentile":354},"2026-06-30",0.12358,{"date":356,"score":52,"percentile":357},"2026-07-01",0.12429,{"date":359,"score":52,"percentile":360},"2026-07-02",0.12404,{"date":362,"score":52,"percentile":363},"2026-07-03",0.12397,{"date":365,"score":52,"percentile":360},"2026-07-04",{"date":101,"score":52,"percentile":102},[368,375,380],{"source":61,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":369,"cvss_v4_0":9},{"baseScore":370,"baseSeverity":371,"vectorString":372,"impactScore":373,"exploitabilityScore":374},3.5,"LOW","CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N",2.3,4.6,{"source":56,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":376,"cvss_v4_0":9},{"baseScore":54,"baseSeverity":377,"vectorString":57,"impactScore":378,"exploitabilityScore":379},"MEDIUM",6,4.1,{"source":62,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":381,"cvss_v4_0":9},{"baseScore":54,"baseSeverity":9,"vectorString":57,"impactScore":378,"exploitabilityScore":379},[383,403],{"ecosystem":9,"name":384,"vendor":385,"product":386,"cpe_part":387,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":388},"Keystone","openstack","keystone","a",[389,397,399,401],{"version":390,"is_range":391,"range_type":392,"version_start":393,"version_start_type":394,"version_end":395,"version_end_type":396,"fixed_in":9},"gte14.0.0_lt26.1.1",true,"cpe","14.0.0","including","26.1.1","excluding",{"version":398,"is_range":28,"range_type":392,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"27.0.0",{"version":400,"is_range":28,"range_type":392,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"28.0.0",{"version":402,"is_range":28,"range_type":392,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"29.0.0",{"ecosystem":404,"name":386,"vendor":404,"product":386,"cpe_part":9,"purl_type":405,"purl_namespace":9,"purl_name":386,"source":9,"versions":406},"PyPI","pypi",[407],{"version":408,"is_range":391,"range_type":409,"version_start":393,"version_start_type":394,"version_end":395,"version_end_type":396,"fixed_in":9},"gte14_0_0_lt26_1_1","ecosystem"]