Python Keyring — known CVE vulnerabilities

Every CVE whose affected-product data names Python Keyring, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2012-5577 — CVSS 7.5 (high): Python keyring lib before 0.10 created keyring files with world-readable permissions.
• CVE-2012-5578 — CVSS 6.2 (medium): Python keyring has insecure permissions on new databases allowing world-readable files to be created
• CVE-2012-4571 — CVSS 2.1 (low): Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier…