VulertSecurity VulertSecurity

Vulnerability Database · Search

keylime vulnerabilities — 21 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →
Severity Vulnerability Package Ecosystem Disclosed Fixed version
6.3 medium CVE-2026-6420: Keylime Hardcoded Nonce Vulnerability Allows Replay Attacks keylime PyPI 13 Jul 2026 7.14.2
4.3 medium CVE-2025-1057: Keylime Package Denial-of-Service Vulnerability in Version 7.12.0 keylime PyPI 07 Jul 2026 7.12.1
7.5 high CVE-2023-38200: Keylime Denial-of-Service Vulnerability via Open Connection keylime PyPI 07 Jul 2026 7.4.0
6.3 medium CVE-2026-6420: Keylime Hardcoded Nonce Vulnerability Allows Replay Attacks keylime PyPI 11 May 2026 7.14.2
6.3 medium Replay Attack Vulnerability in Keylime: Hardcoded Nonce Issue keylime PyPI 06 May 2026 7.14.2
9.4 critical CVE-2026-1709: Keylime Critical Authentication Bypass Vulnerability keylime PyPI 06 Feb 2026 7.12.2
9.4 critical Critical Authentication Bypass in Keylime Package keylime PyPI 06 Feb 2026 7.12.2
9.8 critical CVE-2026-1709: Keylime Package TLS Authentication Bypass Vulnerability keylime PyPI 06 Feb 2026 7.12.0
8.2 high CVE-2025-13609: Keylime Allows UUID Recycling for Agent Registration Vulnerability keylime PyPI 24 Nov 2025 7.13.0
8.2 high CVE-2025-13609: Keylime Package Vulnerability Allows Agent Impersonation keylime PyPI 24 Nov 2025 No fix published
4.3 medium CVE-2025-1057: Keylime Registrar Denial-of-Service Vulnerability in Version 7.12.0 keylime PyPI 14 Feb 2025 7.12.1
6.5 high CVE-2023-38201: Keylime - Bypass of Challenge-Response Protocol during Agent Registration keylime PyPI 06 Sep 2023 7.5.0
6.5 medium CVE-2023-38201: Keylime - Bypass of Challenge-Response Protocol during Agent Registration keylime PyPI 25 Aug 2023 9e5ac9f25cd400b16d5969f531cee28290543f2a
7.5 high CVE-2023-38200: Denial-of-service vulnerability in Keylime's registrar keylime PyPI 01 Aug 2023 7.4.0
7.5 high Duplicate Advisory: Keylime's registrar vulnerable to Denial-of-service attack via a single open connection keylime PyPI 24 Jul 2023 7.4.0
2.3 medium CVE-2023-3674: keylime - Failure to Flag Device as Untrusted keylime PyPI 19 Jul 2023 7.2.5
2.8 low CVE-2023-3674: keylime - Faulty TPM Quote Validation keylime PyPI 19 Jul 2023 95ce3d86bd2c53009108ffda2dcf553312d733db
Unrated CVE-2022-3500: keylime - Improper Handling of Exceptions keylime PyPI 22 Nov 2022 6.5.1
5.1 high CVE-2022-3500: Keylime - Unhandled Exceptions Could Lead to Invalid Attestation States keylime PyPI 28 Oct 2022 6.5.1
Unrated CVE-2022-1053: Keylime Agent Registrar Data Validation Bypass keylime PyPI 06 May 2022 bd5de712acdd77860e7dc58969181e16c7a8dc5d
Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.