CLEANSTART-2026-IY00574 Security fix for ghsa-jpcw-4wr7-c3vq applied in: crossplane-provider-keycloak-fips 2.21.1-r1, grafana 12.3.10-r1, grafana 12.3.8-r2, grafana 12.4.5-r2, grafana 12.4.6-r0, grafana 12.4.7-r1, grafana 13.0.5-r1

ghsa-jpcw-4wr7-c3vq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QG09964 Security fix for CVE-2026-5160 applied in: crossplane-provider-keycloak 2.22.1-r2, pulumi 3.248.0-r0

CVE-2026-5160 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IB33850 Security fixes in crossplane-provider-keycloak-fips 2.21.1-r1

Package crossplane-provider-keycloak-fips version 2.21.1-r1 fixes 2 vulnerabilities: CVE-2026-41178, ghsa-jpcw-4wr7-c3vq...

CLEANSTART-2026-ZA01366 Security fixes in crossplane-provider-keycloak 2.22.1-r2

Package crossplane-provider-keycloak version 2.22.1-r2 fixes 2 vulnerabilities: CVE-2026-56852, CVE-2026-5160...

CLEANSTART-2026-FB06164 Security fixes in crossplane-provider-keycloak-fips 2.22.1-r1

Package crossplane-provider-keycloak-fips version 2.22.1-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sqs, grafana-alloy, crossplane-provider-aws-firehose, crossplane-provider-aws-ec2, crossplane-provider-aws-kinesis, crossplane-provider-aws-kms, crossplane-provider-aws-s3, crossplane-provider-aws-eks, aws-otel-collector,...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sqs, grafana-alloy, crossplane-provider-aws-firehose, crossplane-provider-aws-ec2, crossplane-provider-aws-kinesis, crossplane-provider-aws-kms, crossplane-provider-aws-s3, crossplane-provider-aws-eks, aws-otel-collector,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-firehose, osv-scanner, nfpm, crossplane-provider-aws-kms, policy-controller, terraform-provider-azuread, crossplane-provider-aws-eks, crossplane, crossplane-provider-azure-managedidentity, kubevela, trivy-operator, crossplane-provider-aws-iam,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-firehose, osv-scanner, nfpm, crossplane-provider-aws-kms, policy-controller, terraform-provider-azuread, crossplane-provider-aws-eks, crossplane, crossplane-provider-azure-managedidentity, kubevela, trivy-operator, crossplane-provider-aws-iam,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: vault, flux-kustomize-controller-fips, syft, docker-fips, crossplane-provider-aws-elasticache, terraform-provider-pagerduty, crossplane-provider-aws-s3, terraform-provider-databricks, packer, zarf, pulumi, boring-registry-fips, trufflehog-fips, policy-controller-fips...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: nri-kubernetes, kaf, task, petname, go-licenses, slsa-verifier, helm-push, cis-operator, kubernetes-dashboard-web, kapp, sqlexporter, op-geth, mesosphere-vsphere-csi, cert-manager-webhook-pdns, k3d, sonobuoy, cluster-api-aws-controller, mongodb-kubernetes-operator,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: kaf, certificate-transparency, petname, go-licenses, croc, slsa-verifier, helm-push, go-bindata, kubernetes-dashboard-web, kapp, sqlexporter, cert-manager-webhook-pdns, vertical-pod-autoscaler, sonobuoy, kpt, falco-exporter, neuvector-sigstore-interface,...