CVE-2026-68497 vulnerabilities

Vulnerabilities for packages: apache-tika-fips, kafka-bridge-fips, celeborn, cassandra-reaper, request-9047-keycloak-fips, hono, flink-kubernetes-operator, apache-tika, dependency-track-apiserver, kates-fips, seata, kafbat-ui-fips, jmeter, drain-cleaner, apache-activemq-fips, zipkin, elasticsearc...

GHSA-GX83-3VF8-GH7J vulnerabilities

Vulnerabilities for packages: apache-tika-fips, kafka-bridge-fips, celeborn, cassandra-reaper, request-9047-keycloak-fips, hono, flink-kubernetes-operator, apache-tika, dependency-track-apiserver, kates-fips, seata, kafbat-ui-fips, jmeter, drain-cleaner, apache-activemq-fips, zipkin, elasticsearc...

GHSA-Q4XH-88C3-WMH7 vulnerabilities

Vulnerabilities for packages: apache-tika-fips, kafka-bridge-fips, celeborn, cassandra-reaper, request-9047-keycloak-fips, hono, flink-kubernetes-operator, apache-tika, dependency-track-apiserver, kates-fips, seata, kafbat-ui-fips, jmeter, drain-cleaner, apache-activemq-fips, zipkin, elasticsearc...

GHSA-WJGM-6HV5-3CVF vulnerabilities

Vulnerabilities for packages: apache-tika-fips, kafka-bridge-fips, celeborn, cassandra-reaper, request-9047-keycloak-fips, hono, flink-kubernetes-operator, apache-tika, dependency-track-apiserver, kates-fips, seata, kafbat-ui-fips, jmeter, drain-cleaner, apache-activemq-fips, zipkin, elasticsearc...

CVE-2026-19032 vulnerabilities

Vulnerabilities for packages: apache-tika-fips, kafka-bridge-fips, celeborn, cassandra-reaper, request-9047-keycloak-fips, hono, flink-kubernetes-operator, apache-tika, dependency-track-apiserver, kates-fips, seata, kafbat-ui-fips, jmeter, drain-cleaner, apache-activemq-fips, zipkin, elasticsearc...

CVE-2026-57836-Confluent_Kafka

CVE-2026-57836: Disabled TLS Certificate Verification for HashiCorp Vault KMS in confluent-kafka Severity: High, CVSS 3.1 7.4 Vector v3.1: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected: confluent-kafka = 2.8.0, = 2.14.2 Fixed in: 2.15.0 CWE: CWE-295 Improper Certificate Validation...

CVE-2026-86792: Use of Externally-Controlled Input to Select Classes or Code

Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found in a Kafka connection's extra field into Python callables via importstring, with no allowlist, and hand them to the confluent-kafka client which invokes them. Deployments that have enabled the Kafk...

CVE-2026-83557 vulnerabilities

Vulnerabilities for packages: apache-tika-fips, kafka-bridge-fips, celeborn, cassandra-reaper, request-9047-keycloak-fips, hono, flink-kubernetes-operator, apache-tika, dependency-track-apiserver, kates-fips, seata, kafbat-ui-fips, jmeter, drain-cleaner, apache-activemq-fips, zipkin, elasticsearc...

CLEANSTART-2026-KQ29054 Security fixes in confluent-kafka 8.3.0-r1

Package confluent-kafka version 8.3.0-r1 fixes 14 vulnerabilities: CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54516, CVE-2026-54517...

CLEANSTART-2026-NG34780 Security fixes in confluent-kafka 8.2.0-r1

Package confluent-kafka version 8.2.0-r1 fixes 3 vulnerabilities: ghsa-72hv-8253-57qq, ghsa-6fmv-xxpf-w3cw, CVE-2025-67030...

CLEANSTART-2026-AU09596 Security fixes in confluent-kafka 8.2.0-r0

Package confluent-kafka version 8.2.0-r0 fixes 7 vulnerabilities: CVE-2026-34477, CVE-2026-34478, CVE-2026-34479, CVE-2026-34480, CVE-2026-2332...

CVE-2026-10051 vulnerabilities

Vulnerabilities for packages: neo4j, solr, strimzi-kafka-operator, dependency-track, trino, druid, confluent-kafka, akhq...

CVE-2026-10050 vulnerabilities

Vulnerabilities for packages: neo4j, solr, cloudwatch-exporter, tez, dependency-track, apache-tika, trino, druid, confluent-kafka, akhq...

CVE-2026-6790 vulnerabilities

Vulnerabilities for packages: neo4j, solr, strimzi-kafka-operator, cloudwatch-exporter, dependency-track, apache-tika, druid, confluent-kafka, akhq...

GHSA-7P3P-8QV8-M2VH vulnerabilities

Vulnerabilities for packages: neo4j, solr, strimzi-kafka-operator, cloudwatch-exporter, dependency-track, apache-tika, druid, confluent-kafka, akhq...

GHSA-W7X5-G22V-XQHR vulnerabilities

Vulnerabilities for packages: neo4j, solr, strimzi-kafka-operator, dependency-track, trino, druid, confluent-kafka, akhq...

GHSA-F4V5-65JJ-PCR2 vulnerabilities

Vulnerabilities for packages: neo4j, solr, strimzi-kafka-operator, dependency-track, trino, druid, confluent-kafka, akhq...

GHSA-2FVJ-HGJ9-J2GR vulnerabilities

Vulnerabilities for packages: neo4j, solr, cloudwatch-exporter, tez, dependency-track, apache-tika, trino, druid, confluent-kafka, akhq...

CVE-2026-8384 vulnerabilities

Vulnerabilities for packages: neo4j, solr, strimzi-kafka-operator, dependency-track, trino, druid, confluent-kafka, akhq...

CVE-2026-56741 vulnerabilities

Vulnerabilities for packages: spark-fips, spark-kubernetes-operator, zookeeper-fips, apache-hop, zookeeper, pinot-fips, kafka, tez, hadoop-fips, apache-camel-karavan-devmode, druid, confluent-kafka, spark-kubernetes-operator-fips, kafka-fips, pinot, apache-pulsar, apache-hop-fips,...