https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 13:15:00 +0000 https://db.gcve.eu/vuln/cve-2026-92228 <p><strong>Affected:</strong> Apache Software Foundation Apache Airflow Keycloak provider</p> <p>The Apache Airflow Keycloak provider&#39;s multi-team provisioning (`_attach_team_permissions`) granted every team role global read access to audit logs. Deployments that enable multi-team mode with the Keycloak auth manager and provision teams through it are affected: any authenticated member of one team could read other teams&#39; audit events through the UI or the event-log API.</p> <p>Users of apache-airflow-providers-keycloak are recommended to upgrade to apache-airflow-providers-keycloak 0.11.1 or later.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Airflow Keycloak provider</p> <p>The Apache Airflow Keycloak provider&#39;s multi-team provisioning (`_attach_team_permissions`) granted every team role global read access to audit logs. Deployments that enable multi-team mode with the Keycloak auth manager and provision teams through it are affected: any authenticated member of one team could read other teams&#39; audit events through the UI or the event-log API.</p> <p>Users of apache-airflow-providers-keycloak are recommended to upgrade to apache-airflow-providers-keycloak 0.11.1 or later.</p> https://db.gcve.eu/vuln/cve-2026-92228