Thinkupthemes Drift vulnerabilities

• hulumi drift @hulumi/drift before 1.3.2 Unsafe Execute Plan Acceptance CVE-2026-82858 Fix available 9.3 CriticalMay 21, 2026
• thinkupthemes drift Drift <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title CVE-2025-12116 6.4 MediumFebruary 19, 2026