> Debian: python-keystonemiddleware Security Flaw DSA-6104-1 CVE-2026-22797

Grzegorz Grasza discovered a vulnerability in the Openstack middleware to provide authentication and authorization features to web services other than Keystone: If an external OAuth provider is configured, authentication headers are insufficiently sanitised, which could result in privilege escalation or user impersonation.