[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-43001":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T06:21:05.817Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":26,"aliases":36,"duplicate_of":9,"upstream":39,"downstream":40,"duplicates":49,"related":50,"reserved_at":9,"published_at":53,"modified_at":54,"state":55,"summary":56,"references_raw":64,"kevs":119,"epss":120,"epss_history":123,"metrics":324,"affected":336},"CVE-2026-43001","An issue was discovered in OpenStack Keystone before 29.0.2. POST /v3/credentials did not validate that the caller-supplied project_id for an EC2-type credential matched the project of the authenticating application credential. This allowed an attacker holding an unrestricted application credential for project A to create an EC2 credential targeting project B; a subsequent /v3/ec2tokens exchange would then issue a Keystone token scoped to project B while still carrying the original app_cred_id, enabling cross-project lateral movement within the credential owner's role footprint.",null,[11,20],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-863","Incorrect Authorization","The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.","weakness","Incomplete","Class","High",[],{"_key":21,"id":21,"name":22,"description":23,"type":15,"status":16,"abstraction":24,"likelihood_of_exploit":9,"capec":25},"CWE-1288","Improper Validation of Consistency within Input","The product receives a complex input with multiple elements or fields that must be consistent with each other, but it does not validate or incorrectly validates that the input is actually consistent.","Base",[],[27],{"_key":28,"name":29,"source":30,"url":31,"maturity":32,"reliability_score":33,"verified":34,"type":9,"platforms":35,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_9998431074D9A451","Exploit Reference (bugs.launchpad.net)","reference","https://bugs.launchpad.net/keystone/+bug/2149775","unknown",0.2,false,[],[37,38],"GHSA-hhq2-3832-xxcv","PYSEC-2026-602",[],[41,43,45,47],{"_key":42},"DEBIAN-CVE-2026-43001",{"_key":44},"USN-8433-1",{"_key":46},"UBUNTU-CVE-2026-43001",{"_key":48},"RHSA-2026:39808",[],[51],{"_key":52},"CGA-PX25-JX2M-RJ34","2026-05-01T00:00:00.000Z","2026-07-15T13:48:08.099Z","Analyzed",{"cisa_kev":34,"cisa_ransomware":34,"cisa_vendor":9,"epss_severity":57,"epss_score":58,"severity":59,"severity_score":60,"severity_version":61,"severity_source":62,"severity_vector":63,"severity_status":55},"low",0.00446,"high",8,"v3.1","nvd","CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",[65,76,80,85,90,95,101,106,111,115],{"url":31,"sources":66,"tags":69},[67,62,68],"cve.org","osv_pypi",[70,71,72,73,74,75],"Exploit","Issue Tracking","WEB","Third Party Advisory","Patch","FIX",{"url":77,"sources":78,"tags":79},"https://review.opendev.org/c/openstack/keystone/+/985804",[67,62,68],[74,72,75],{"url":81,"sources":82,"tags":83},"https://nvd.nist.gov/vuln/detail/CVE-2026-43001",[68],[84],"Advisory",{"url":86,"sources":87,"tags":88},"https://review.opendev.org/c/openstack/keystone",[68],[89],"PACKAGE",{"url":91,"sources":92,"tags":93},"https://security.openstack.org/ossa/OSSA-2026-015.html",[67,62,68],[94,74,72,75],"Vendor Advisory",{"url":96,"sources":97,"tags":98},"https://access.redhat.com/security/cve/CVE-2026-43001",[67,68],[99,100,72],"VDB Entry","X Refsource REDHAT",{"url":102,"sources":103,"tags":104},"https://bugzilla.redhat.com/show_bug.cgi?id=2464305",[67,68],[71,100,105],"REPORT",{"url":107,"sources":108,"tags":109},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43001.json",[67,68],[110,72],"X Sadp Csaf Vex",{"url":112,"sources":113,"tags":114},"https://access.redhat.com/errata/RHSA-2026:39808",[67],[94,100],{"url":116,"sources":117,"tags":118},"https://github.com/advisories/GHSA-hhq2-3832-xxcv",[68],[84],[],{"date":121,"score":58,"percentile":122},"2026-07-05",0.35767,[124,128,131,134,137,140,143,147,150,153,156,159,162,165,167,170,173,176,179,182,185,188,191,194,197,200,203,206,209,212,215,218,221,225,228,231,234,237,240,243,246,249,252,256,259,262,266,269,272,275,278,281,284,287,290,293,296,299,302,305,308,311,314,317,320,323],{"date":125,"score":126,"percentile":127},"2026-05-01",0.00012,0.01762,{"date":129,"score":126,"percentile":130},"2026-05-02",0.01748,{"date":132,"score":126,"percentile":133},"2026-05-03",0.01753,{"date":135,"score":126,"percentile":136},"2026-05-04",0.01751,{"date":138,"score":126,"percentile":139},"2026-05-05",0.01644,{"date":141,"score":126,"percentile":142},"2026-05-06",0.01633,{"date":144,"score":145,"percentile":146},"2026-05-07",0.00013,0.02137,{"date":148,"score":145,"percentile":149},"2026-05-08",0.02141,{"date":151,"score":145,"percentile":152},"2026-05-09",0.02163,{"date":154,"score":145,"percentile":155},"2026-05-10",0.02161,{"date":157,"score":145,"percentile":158},"2026-05-11",0.02164,{"date":160,"score":145,"percentile":161},"2026-05-12",0.02143,{"date":163,"score":145,"percentile":164},"2026-05-13",0.0215,{"date":166,"score":145,"percentile":164},"2026-05-14",{"date":168,"score":145,"percentile":169},"2026-05-15",0.02153,{"date":171,"score":145,"percentile":172},"2026-05-16",0.02157,{"date":174,"score":145,"percentile":175},"2026-05-17",0.02154,{"date":177,"score":145,"percentile":178},"2026-05-18",0.02138,{"date":180,"score":145,"percentile":181},"2026-05-19",0.02125,{"date":183,"score":145,"percentile":184},"2026-05-20",0.02117,{"date":186,"score":145,"percentile":187},"2026-05-21",0.02103,{"date":189,"score":145,"percentile":190},"2026-05-22",0.02242,{"date":192,"score":145,"percentile":193},"2026-05-23",0.02236,{"date":195,"score":145,"percentile":196},"2026-05-24",0.02226,{"date":198,"score":145,"percentile":199},"2026-05-25",0.02216,{"date":201,"score":145,"percentile":202},"2026-05-26",0.02202,{"date":204,"score":145,"percentile":205},"2026-05-27",0.0222,{"date":207,"score":145,"percentile":208},"2026-05-28",0.02214,{"date":210,"score":126,"percentile":211},"2026-05-29",0.0195,{"date":213,"score":126,"percentile":214},"2026-05-30",0.01973,{"date":216,"score":126,"percentile":217},"2026-05-31",0.01967,{"date":219,"score":126,"percentile":220},"2026-06-01",0.01953,{"date":222,"score":223,"percentile":224},"2026-06-02",0.00018,0.05031,{"date":226,"score":223,"percentile":227},"2026-06-03",0.0473,{"date":229,"score":223,"percentile":230},"2026-06-04",0.04724,{"date":232,"score":223,"percentile":233},"2026-06-05",0.04747,{"date":235,"score":223,"percentile":236},"2026-06-06",0.04732,{"date":238,"score":223,"percentile":239},"2026-06-07",0.04719,{"date":241,"score":223,"percentile":242},"2026-06-08",0.04681,{"date":244,"score":223,"percentile":245},"2026-06-09",0.04704,{"date":247,"score":223,"percentile":248},"2026-06-10",0.04725,{"date":250,"score":223,"percentile":251},"2026-06-11",0.0474,{"date":253,"score":254,"percentile":255},"2026-06-12",0.00024,0.07093,{"date":257,"score":254,"percentile":258},"2026-06-13",0.07087,{"date":260,"score":254,"percentile":261},"2026-06-14",0.0708,{"date":263,"score":264,"percentile":265},"2026-06-15",0.00404,0.31966,{"date":267,"score":264,"percentile":268},"2026-06-16",0.32021,{"date":270,"score":264,"percentile":271},"2026-06-17",0.3205,{"date":273,"score":264,"percentile":274},"2026-06-18",0.32102,{"date":276,"score":264,"percentile":277},"2026-06-19",0.32089,{"date":279,"score":264,"percentile":280},"2026-06-20",0.32078,{"date":282,"score":264,"percentile":283},"2026-06-21",0.32061,{"date":285,"score":264,"percentile":286},"2026-06-22",0.32049,{"date":288,"score":264,"percentile":289},"2026-06-23",0.32124,{"date":291,"score":264,"percentile":292},"2026-06-24",0.32155,{"date":294,"score":264,"percentile":295},"2026-06-25",0.32236,{"date":297,"score":264,"percentile":298},"2026-06-26",0.32278,{"date":300,"score":264,"percentile":301},"2026-06-27",0.32315,{"date":303,"score":264,"percentile":304},"2026-06-28",0.32292,{"date":306,"score":264,"percentile":307},"2026-06-29",0.32296,{"date":309,"score":58,"percentile":310},"2026-06-30",0.35584,{"date":312,"score":58,"percentile":313},"2026-07-01",0.35685,{"date":315,"score":58,"percentile":316},"2026-07-02",0.35714,{"date":318,"score":58,"percentile":319},"2026-07-03",0.35732,{"date":321,"score":58,"percentile":322},"2026-07-04",0.3575,{"date":121,"score":58,"percentile":122},[325,332,334],{"source":67,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":326,"cvss_v4_0":9},{"baseScore":327,"baseSeverity":328,"vectorString":329,"impactScore":330,"exploitabilityScore":331},7.9,"HIGH","CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L",10,3.3,{"source":62,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":333,"cvss_v4_0":9},{"baseScore":60,"baseSeverity":328,"vectorString":63,"impactScore":330,"exploitabilityScore":331},{"source":68,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":335,"cvss_v4_0":9},{"baseScore":60,"baseSeverity":9,"vectorString":63,"impactScore":330,"exploitabilityScore":331},[337,367],{"ecosystem":9,"name":338,"vendor":339,"product":340,"cpe_part":341,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":342},"Keystone","openstack","keystone","a",[343,349,354,359,363],{"version":344,"is_range":345,"range_type":67,"version_start":346,"version_start_type":347,"version_end":348,"version_end_type":347,"fixed_in":9},">= 13, \u003C= 29",true,"13","including","29",{"version":350,"is_range":345,"range_type":351,"version_start":352,"version_start_type":347,"version_end":353,"version_end_type":347,"fixed_in":9},"gte13.0.0_lte19.0.0","cpe","13.0.0","19.0.0",{"version":355,"is_range":345,"range_type":351,"version_start":356,"version_start_type":347,"version_end":357,"version_end_type":358,"fixed_in":9},">= 14.0.0, \u003C 27.0.2","14.0.0","27.0.2","excluding",{"version":360,"is_range":345,"range_type":351,"version_start":361,"version_start_type":347,"version_end":362,"version_end_type":358,"fixed_in":9},">= 28.0.0, \u003C 28.0.2","28.0.0","28.0.2",{"version":364,"is_range":345,"range_type":351,"version_start":365,"version_start_type":347,"version_end":366,"version_end_type":358,"fixed_in":9},">= 29.0.0, \u003C 29.0.2","29.0.0","29.0.2",{"ecosystem":368,"name":340,"vendor":368,"product":340,"cpe_part":9,"purl_type":369,"purl_namespace":9,"purl_name":340,"source":9,"versions":370},"PyPI","pypi",[371,375],{"version":372,"is_range":345,"range_type":373,"version_start":352,"version_start_type":347,"version_end":374,"version_end_type":347,"fixed_in":9},"gte13_0_0_lte29_0_1","ecosystem","29.0.1",{"version":376,"is_range":345,"range_type":373,"version_start":365,"version_start_type":347,"version_end":366,"version_end_type":358,"fixed_in":9},"gte29_0_0_lt29_0_2"]