Sep 13 Release Watch: Keycloak, Vercel, Redis & Podman

Today's sweep across containers, identity, meta-frameworks, and data infrastructure surfaces one clear theme: security disclosures are outpacing patches. Keycloak picked up three fresh advisories this week with two still open, Redis quietly fixed a bug that let unauthenticated clients reach Active-Active databases, and Vercel used the calm to ship pricing and infrastructure changes instead. Here's the breakdown.

Executive Summary

• Keycloak: three advisories disclosed this cycle — CVE-2026-82968 (first-broker login account linking) and CVE-2026-88770 (device flow bypasses account lockout) remain unpatched; CVE-2026-9792 (Client Policies ROPC bypass) is under active tracking.
• Redis: a high-severity Kubernetes operator bug let Active-Active databases accept connections with no credentials — and no TLS certificate in the mTLS case — while reporting healthy. Fixed in operator 7.22.2-45 and related lines.
• Docker & Podman: Docker Desktop patched a VM panic in the grpcfuse module (CVE-2026-8936) plus CVE-2026-17106. Podman 6.1.1 closed an environment-variable leak (CVE-2026-57231) and bumped golang.org/x/crypto for two more CVEs.
• Vercel: flat-rate CDN pricing for Pro teams, Sandbox storage doubled to 64 GB, AWS PrivateLink reaching general availability, and Claude Fable 5.1 landing in AI Gateway.
• Cloudflare: Workflows retention on the Paid plan drops from 30 to 7 days for instances created after September 10; D1 Free-plan row limits are now hard-enforced; R2 Data Access Logs reached GA.
• Frameworks: Next.js sits at 16.3.4, Astro shipped 7.3.0, SvelteKit landed adapter and single-flight mutation updates, and Django released 6.1.1.
• Identity: Better Auth is at 1.7.3 following Vercel's acquisition of the project; Auth.js/NextAuth is now maintained by the Better Auth team; Clerk expanded its free tier to 50,000 MAU.

Keycloak: Three New Advisories, Two Still Open

Keycloak's disclosure pace hasn't slowed since last week's batch of fixes. Three additional issues are now public, and coverage is uneven:

• CVE-2026-82968 — an attacker on the same social identity provider can intercept first-broker-login account linking. No patched release exists as of September 11.
• CVE-2026-88770 — an attacker holding a device authorization can redeem it for tokens even after brute-force protection has locked the target account, because token redemption never re-checks lock status. Also unpatched, with no upstream tracking issue yet.
• CVE-2026-9792 — a Client Policies authorization bypass: a standard Resource Owner Password Credentials request against a client governed by a deny policy still returns valid tokens.

Until fixes ship, the practical mitigation for the first two is to disable social-provider account linking and device flow where you don't strictly need them:

# realm-export.json — disable device flow grant on the client
{
  "clientId": "your-app",
  "attributes": {
    "oauth2.device.authorization.grant.enabled": "false"
  }
}

Vercel: Flat-Rate CDN, Bigger Sandboxes, Fable 5.1 in AI Gateway

Vercel's September 8 release introduced Flat Rate CDN pricing for Pro teams — a fixed monthly bill with premium global delivery and automatic protection against viral traffic spikes, replacing pure usage-based billing for that tier.

Two infrastructure changes followed on September 11: Vercel Sandbox storage doubled from 32 GB to 64 GB by default on the latest SDK and CLI, and Vercel Connect on Pro/Enterprise can now restrict who is allowed to create and manage connectors.

On the AI side, AI Gateway added Claude Fable 5.1 access with a single API key, automatic fallbacks, spend tracking, and request traces, and GitHub Copilot now routes through the AI SDK's harness layer via @ai-sdk/harness-github-copilot. AWS PrivateLink also reached general availability, letting deployments reach AWS-hosted databases over a private network path instead of the public internet.

Cloudflare: Shorter Workflow Retention, D1 Free-Tier Limits Now Enforced

Two changes here are worth checking against production usage. First, Workflows created on or after September 10 on the Workers Paid plan now retain completed and errored instance state for 7 days instead of 30 — audit or export instance history sooner if you rely on it.

Second, as of September 1, D1 queries on the Workers Free plan now hard-fail once an account exceeds its daily row read/write limits — both the Workers Binding API and the REST API return errors until the UTC midnight reset. Free-tier apps near the ceiling should budget for this rather than discover it in production.

On the positive side, R2 Data Access Logs are now generally available, and Python Workers using compatibility date 2026-09-08 or later get Pyodide 314.0.6. Note also that Service Keys stop working September 30 — migrate to API tokens before then.

Docker & Podman: Container-Escape-Adjacent CVEs Closed

Docker Desktop shipped Build v0.35.0 alongside Docker Agent v1.62.0, NVIDIA Container Toolkit v1.19.1, and Compose v5.1.4. The security-relevant fix is CVE-2026-8936: unbounded recursion in the grpcfuse kernel module could panic the VM when a container created deeply nested directories on a bind-mounted host folder. CVE-2026-17106 was also addressed in the same cycle.

Podman 6.1.1 (September 2) fixed CVE-2026-57231, where a malicious image with malformed Env entries could leak host environment variables into a container — including via glob-style matching that didn't require knowing exact variable names. The release also bumped golang.org/x/crypto to v0.53.0 for CVE-2026-39830 and CVE-2026-42508.

# Podman: check and upgrade
podman version --format '{{.Client.Version}}'
sudo dnf upgrade podman   # or: brew upgrade podman

Redis: Silent Auth Bypass on Active-Active Databases

The most consequential fix this cycle is easy to miss because it's scoped to Redis Software for Kubernetes rather than open-source Redis. A high-severity bug let Active-Active databases accept client connections with no credentials at all — and, on the mTLS variant, accept clients presenting no certificate — while the database kept reporting healthy status with no alert firing.

Fixed operator versions: 7.4.6-11, 7.8.6-20, 7.22.2-45, 8.0.20-27, and 8.2.0-15. If you run Active-Active Redis on Kubernetes, treat this as a priority patch rather than routine maintenance — silently open auth is the kind of gap that won't show up until it's exploited.

Meta-Frameworks: Point Releases Across the Board

• Next.js is at 16.3.4 (shipped August 31), following a scheduled security release for 16.3 and 15.5 that patched a critical-severity vulnerability. No new Next.js release landed today.
• Astro 7.3.0 released September 3 — a patch release on the Astro 7 line built on Vite 8 with the newer Rust-based compiler.
• SvelteKit shipped September 9 with a fix for EEXIST errors when symlinking traced files resolving to the same destination, plus stronger single-flight mutation handling and new adapter hooks for Vite dev/preview.
• Django 6.1.1 shipped September 2; 6.1 carries standard support through April 2027 and security support through December 2027.
• Laravel remains at 13.26.1 (August 18); FastAPI is at 0.141.1 with no formal EOL policy but periodic security fixes called out in release notes.

Identity & Auth: Consolidation Continues

• Better Auth is at 1.7.3 (tagged September 6), following the 1.7 release that added OAuth/OIDC improvements, enterprise identity, MCP authorization support, and SCIM groups. This follows Vercel's July 7 acquisition of Better Auth, with the founding team moving to build "Agent Auth" — an identity layer aimed at AI agents rather than only human logins.
• Auth.js/NextAuth is now maintained by the Better Auth team in maintenance mode — for new projects, the practical choice is Better Auth vs. Clerk rather than Auth.js vs. either.
• Clerk expanded its free tier to 50,000 monthly active users before usage-based billing kicks in.

Also Tracking: No Material Changes This Cycle

The rest of today's watchlist held steady with no new releases, advisories, or breaking changes surfacing in official channels as of publication: Kubernetes, AWS, Railway, and Render infrastructure; Authentik (no advisories found for this cycle); React, Nuxt, and Vue; NestJS, Fastify, Express, ElysiaJS, and Hono; shadcn/ui, Radix UI, Tailwind CSS (stable at 4.3.2), Material UI, and Motion; PostgreSQL, PgVector, MongoDB, ClickHouse, and DuckDB; Prisma (8 RC in development), Drizzle (1.0 beta), Supabase, and Firebase; and BullMQ, RabbitMQ (4.3.2), Apache Kafka (4.2.0), and Temporal.

We'll flag any of these the moment they publish a dated release note, advisory, or CVE — this roundup only reports changes we could verify against an official source, not scheduled or speculative ones.