Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
crossplane-provider-keycloak-fips may let attackers bypass security
published 2 months ago
Summary
The crossplane-provider-keycloak-fips component contains three security gaps that could allow a malicious user to execute code or gain access to data they shouldn't have. This could expose your systems to unauthorized actions or data loss. Update to the latest version of crossplane-provider-keycloak-fips as soon as possible to close these gaps.
What to do
- Update cleanstart crossplane-provider-keycloak-fips to version 2.22.1-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | crossplane-provider-keycloak-fips |
< 2.22.1-r1 Fix: upgrade to 2.22.1-r1
|
Original advisory text
Security fixes in crossplane-provider-keycloak-fips 2.22.1-r1
Package crossplane-provider-keycloak-fips version 2.22.1-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507
References
Timeline
Published13 Aug 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-FB06164 · OSV
Track software like this
Free during beta