CLEANSTART-2026-QG09964 Security fix for CVE-2026-5160 applied in: crossplane-provider-keycloak 2.22.1-r2, pulumi 3.248.0-r0

CVE-2026-5160 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FB06164 Security fixes in crossplane-provider-keycloak-fips 2.22.1-r1

Package crossplane-provider-keycloak-fips version 2.22.1-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-IB33850 Security fixes in crossplane-provider-keycloak-fips 2.21.1-r1

Package crossplane-provider-keycloak-fips version 2.21.1-r1 fixes 2 vulnerabilities: CVE-2026-41178, ghsa-jpcw-4wr7-c3vq...

CLEANSTART-2026-ZA01366 Security fixes in crossplane-provider-keycloak 2.22.1-r2

Package crossplane-provider-keycloak version 2.22.1-r2 fixes 2 vulnerabilities: CVE-2026-56852, CVE-2026-5160...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-sql, crossplane-provider-aws-kms, crossplane-provider-aws-rds, crossplane-provider-aws-sns, crossplane-provider-aws-cloudfront, nuclei, tempo, crossplane-provider-aws-sqs, crossplane-provider-aws-memorydb, crossplane-provider-azure-storage,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-sql, crossplane-provider-aws-kms, crossplane-provider-aws-rds, crossplane-provider-aws-sns, crossplane-provider-aws-cloudfront, nuclei, tempo, crossplane-provider-aws-sqs, crossplane-provider-aws-memorydb, crossplane-provider-azure-storage,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, docker, pulumi-language-java, cerbos, crossplane-provider-aws-rds, k9s, kubescape, lazygit, nuclei, boring-registry, kubevela, ratify, melange, crossplane-provider-aws-sqs, crossplane-provider-azure-storage, tfsec,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, docker, pulumi-language-java, cerbos, crossplane-provider-aws-rds, k9s, kubescape, lazygit, nuclei, boring-registry, kubevela, ratify, melange, crossplane-provider-aws-sqs, crossplane-provider-azure-storage, tfsec,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: kots, grafana-alloy-fips, crossplane-provider-aws-firehose-fips, crossplane-provider-family-aws-fips, apko-fips, argo-cd, cerbos, terragrunt-fips, omni, boring-registry-fips, crossplane-provider-aws-ec2, flux, nfpm, src-fingerprint, argo-workflows,...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: nginx-prometheus-exporter, k9s, kubescape, nuclei, opentelemetry-collector-contrib, kratos, mkcert, k6, octo-sts, restic, nsc, tfsec, percona-server-mongodb-operator, protoc-gen-go-grpc, ingress-nginx-controller, sftpgo-plugin-eventsearch, paranoia, seaweedfs,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: nginx-prometheus-exporter, k9s, nuclei, mkcert, k6, octo-sts, restic, nsc, tfsec, minify, protoc-gen-go-grpc, configmap-reload, sftpgo-plugin-eventsearch, paranoia, x509-certificate-exporter, crane, kubernetes-dashboard-api, prometheus-adapter, sonobuoy,...