agentprime: apache-software-foundation-apache-airflow-keycloak-providerEvery new CVE for apache-software-foundation-apache-airflow-keycloak-provider.https://agentprime.io/CVE-2026-96806: Apache Airflow Keycloak provider: Keycloak auth manager: logout does not invalidate the session — JWTMiddleware mints an unrevoked replacement tokenhttps://agentprime.io/advisories/CVE-2026-96806/https://agentprime.io/advisories/CVE-2026-96806/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 21:40:20 GMTCVECVE-2026-92228: Apache Airflow Keycloak provider: Keycloak multi-team provisioning grants every team role global audit-log readhttps://agentprime.io/advisories/CVE-2026-92228/https://agentprime.io/advisories/CVE-2026-92228/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 21:37:54 GMTCVECVE-2026-76187: Apache Airflow Keycloak provider: Any realm client's credentials mint an Airflow session JWThttps://agentprime.io/advisories/CVE-2026-76187/https://agentprime.io/advisories/CVE-2026-76187/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 09:10:57 GMTCVEcriticalCVE-2026-76186: Apache Airflow Keycloak provider: Keycloak token cookies not bound to Airflow session identityhttps://agentprime.io/advisories/CVE-2026-76186/https://agentprime.io/advisories/CVE-2026-76186/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 09:09:57 GMTCVEcritical