https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 02:58:13 +0000 https://vulnerability.circl.lu/vuln/cve-2013-2030 <p>keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora.</p> <p>keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora.</p> https://vulnerability.circl.lu/vuln/cve-2013-2030 https://vulnerability.circl.lu/vuln/ghsa-pxxv-rv32-2qgv <p><strong>Affected:</strong> PyPI: python-keystoneclient</p> <p>keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora.</p> <p><strong>Affected:</strong> PyPI: python-keystoneclient</p> <p>keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora.</p> https://vulnerability.circl.lu/vuln/ghsa-pxxv-rv32-2qgv https://vulnerability.circl.lu/vuln/pysec-2026-911 <p><strong>Affected:</strong> PyPI: python-keystoneclient</p> <p>keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora.</p> <p><strong>Affected:</strong> PyPI: python-keystoneclient</p> <p>keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre-creating this directory, which is reused by Nova, as demonstrated using /tmp/keystone-signing-nova on Fedora.</p> https://vulnerability.circl.lu/vuln/pysec-2026-911