CVE-2026-68497 vulnerabilities

Vulnerabilities for packages: apache-tika, gradle, datahub-frontend, apache-tika-fips, scala, ontop, apache-activemq-fips, apicurio-registry-fips, spdx-tools-java, floci, confluent-kafka-jre-bcfips, keycloak-fips, apache-camel-karavan-devmode, knative-kafka-broker-fips, geoserver, zipkin,...

GHSA-GX83-3VF8-GH7J vulnerabilities

Vulnerabilities for packages: apache-tika, gradle, datahub-frontend, apache-tika-fips, scala, ontop, apache-activemq-fips, apicurio-registry-fips, spdx-tools-java, floci, confluent-kafka-jre-bcfips, keycloak-fips, knative-kafka-broker-fips, geoserver, zipkin, kafka-bridge-fips, zookeeper,...

GHSA-Q4XH-88C3-WMH7 vulnerabilities

Vulnerabilities for packages: apache-tika, gradle, datahub-frontend, apache-tika-fips, scala, ontop, apache-activemq-fips, apicurio-registry-fips, spdx-tools-java, floci, confluent-kafka-jre-bcfips, keycloak-fips, apache-camel-karavan-devmode, knative-kafka-broker-fips, geoserver, zipkin,...

GHSA-WJGM-6HV5-3CVF vulnerabilities

Vulnerabilities for packages: apache-tika, gradle, datahub-frontend, apache-tika-fips, scala, ontop, apache-activemq-fips, apicurio-registry-fips, spdx-tools-java, floci, confluent-kafka-jre-bcfips, keycloak-fips, knative-kafka-broker-fips, geoserver, zipkin, kafka-bridge-fips, zookeeper,...

CVE-2026-19032 vulnerabilities

Vulnerabilities for packages: apache-tika, gradle, datahub-frontend, apache-tika-fips, scala, ontop, apache-activemq-fips, apicurio-registry-fips, spdx-tools-java, floci, confluent-kafka-jre-bcfips, keycloak-fips, knative-kafka-broker-fips, geoserver, zipkin, kafka-bridge-fips, zookeeper,...

CVE-2026-57836-Confluent_Kafka

CVE-2026-57836: Disabled TLS Certificate Verification for HashiCorp Vault KMS in confluent-kafka Severity: High, CVSS 3.1 7.4 Vector v3.1: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected: confluent-kafka = 2.8.0, = 2.14.2 Fixed in: 2.15.0 CWE: CWE-295 Improper Certificate Validation...

CVE-2026-86792: Use of Externally-Controlled Input to Select Classes or Code

Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found in a Kafka connection's extra field into Python callables via importstring, with no allowlist, and hand them to the confluent-kafka client which invokes them. Deployments that have enabled the Kafk...

CVE-2026-83557 vulnerabilities

Vulnerabilities for packages: apache-tika, gradle, datahub-frontend, apache-tika-fips, scala, ontop, apache-activemq-fips, apicurio-registry-fips, spdx-tools-java, floci, confluent-kafka-jre-bcfips, keycloak-fips, knative-kafka-broker-fips, geoserver, zipkin, kafka-bridge-fips, zookeeper,...

CLEANSTART-2026-KQ29054 Security fixes in confluent-kafka 8.3.0-r1

Package confluent-kafka version 8.3.0-r1 fixes 14 vulnerabilities: CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54516, CVE-2026-54517...

CLEANSTART-2026-NG34780 Security fixes in confluent-kafka 8.2.0-r1

Package confluent-kafka version 8.2.0-r1 fixes 3 vulnerabilities: ghsa-72hv-8253-57qq, ghsa-6fmv-xxpf-w3cw, CVE-2025-67030...

CLEANSTART-2026-AU09596 Security fixes in confluent-kafka 8.2.0-r0

Package confluent-kafka version 8.2.0-r0 fixes 7 vulnerabilities: CVE-2026-34477, CVE-2026-34478, CVE-2026-34479, CVE-2026-34480, CVE-2026-2332...

CVE-2026-10050 vulnerabilities

Vulnerabilities for packages: apache-tika, dependency-track, trino, akhq, confluent-kafka, neo4j, solr, druid, tez, cloudwatch-exporter...

CVE-2026-6790 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, apache-tika, dependency-track, akhq, confluent-kafka, neo4j, solr, druid, cloudwatch-exporter...

GHSA-7P3P-8QV8-M2VH vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, apache-tika, dependency-track, akhq, confluent-kafka, neo4j, solr, druid, cloudwatch-exporter...

CVE-2026-10051 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, dependency-track, trino, akhq, confluent-kafka, neo4j, solr, druid...

GHSA-W7X5-G22V-XQHR vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, dependency-track, trino, akhq, confluent-kafka, neo4j, solr, druid...

GHSA-2FVJ-HGJ9-J2GR vulnerabilities

Vulnerabilities for packages: apache-tika, dependency-track, trino, akhq, confluent-kafka, neo4j, solr, druid, tez, cloudwatch-exporter...

CVE-2026-8384 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, dependency-track, trino, akhq, confluent-kafka, neo4j, solr, druid...

GHSA-F4V5-65JJ-PCR2 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, dependency-track, trino, akhq, confluent-kafka, neo4j, solr, druid...

CVE-2026-56741 vulnerabilities

Vulnerabilities for packages: zookeeper, spark-kubernetes-operator-fips, zookeeper-fips, tez, apache-hop, apache-pulsar, druid, hadoop-fips, apache-pulsar-fips, apache-hop-fips, ranger, scala, confluent-kafka, kafka, spark, hadoop-client-modules, kafka-fips, pinot-fips, apache-nifi, pinot,...