CLEANSTART-2026-QG09964 Security fix for CVE-2026-5160 applied in: crossplane-provider-keycloak 2.22.1-r2, pulumi 3.248.0-r0

CVE-2026-5160 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IB33850 Security fixes in crossplane-provider-keycloak-fips 2.21.1-r1

Package crossplane-provider-keycloak-fips version 2.21.1-r1 fixes 2 vulnerabilities: CVE-2026-41178, ghsa-jpcw-4wr7-c3vq...

CLEANSTART-2026-FB06164 Security fixes in crossplane-provider-keycloak-fips 2.22.1-r1

Package crossplane-provider-keycloak-fips version 2.22.1-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-ZA01366 Security fixes in crossplane-provider-keycloak 2.22.1-r2

Package crossplane-provider-keycloak version 2.22.1-r2 fixes 2 vulnerabilities: CVE-2026-56852, CVE-2026-5160...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-family-aws, crossplane-provider-aws-sqs, crossplane-provider-aws-cloudfront, crossplane-provider-aws-iam, crossplane-provider-aws-sns, crossplane-provider-keycloak, aws-otel-collector, crossplane-provider-aws-eks, datadog-agent, tempo,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-family-aws, crossplane-provider-aws-sqs, crossplane-provider-aws-cloudfront, crossplane-provider-aws-iam, crossplane-provider-aws-sns, crossplane-provider-keycloak, aws-otel-collector, crossplane-provider-aws-eks, datadog-agent, tempo,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: argo-rollouts, trivy, docker, dagger, rancher-fleet, crossplane-provider-azure-storage, ratify, argo-events, rclone, terraform-provider-azurerm, pulumi-kubernetes-operator, grype, cilium-cli, crossplane-provider-aws-memorydb, flux-helm-controller,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: argo-rollouts, trivy, docker, dagger, rancher-fleet, crossplane-provider-azure-storage, ratify, argo-events, rclone, terraform-provider-azurerm, pulumi-kubernetes-operator, grype, cilium-cli, crossplane-provider-aws-memorydb, flux-helm-controller,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-family-aws, nfpm, syft-fips, flux-kustomize-controller-fips, argo-events, gitness, crossplane-provider-aws-sns, helm, sops, crossplane-provider-aws-cloudformation, syft, packer-fips, crossplane-provider-aws-ecr, amazon-ssm-agent-fips, osv-scanner,...

GHSA-7C64-F9JR-V9H2 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, percona-server-mongodb-operator, mods, kpt, kor, nri-haproxy, grafana-rollout-operator, kiali, opentelemetry-collector-contrib, gobuster, sigstore-scaffolding, newrelic-prometheus-configurator, glow, kubernetes-event-exporter, nri-redis, gitlab-page...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: argo-rollouts, k8ssandra-client, cfssl, timoni, x509-certificate-exporter, ferretdb, argo-events, mods, kpt, kor, certificate-transparency, grafana-rollout-operator, ini-file, kubewatch, kiali, flux-notification-controller, gobuster, flannel, glow,...