CLEANSTART-2026-AT07752 Security fix for CVE-2024-29371 applied in: apache-nifi 2.6.0-r3, apache-nifi 2.7.2-r7, confluent-common-docker 7.6.9-r2, strimzi-kafka-operator 0.47.0-r2

CVE-2024-29371 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GX16359 Security fixes in confluent-common-docker 7.6.9-r3

Package confluent-common-docker version 7.6.9-r3 fixes 4 vulnerabilities: CVE-2025-11226, CVE-2026-1225, ghsa-25qh-j22f-pwp8, ghsa-qqpg-mvqg-649v...

CLEANSTART-2026-KF39510 Security fixes in confluent-common-docker 7.6.9-r5

Package confluent-common-docker version 7.6.9-r5 fixes 2 vulnerabilities: ghsa-rwm7-x88c-3g2p, CVE-2026-42577...

CLEANSTART-2026-OL08873 Security fixes in confluent-common-docker 7.6.9-r2

Package confluent-common-docker version 7.6.9-r2 fixes 7 vulnerabilities: CVE-2026-24281, CVE-2026-24308, CVE-2024-29371, ghsa-7xrh-hqfc-g7qr, ghsa-crhr-qqj8-rpxc...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: reposilite, tez, conductor-fips, guacamole-client, apache-nifi, spark-fips, ruby3.3-jrjackson, nextflow, wazuh-indexer, pinot-fips, knative-kafka-broker-fips, hadoop-fips, spdx-tools-java, wso2is, kafbat-ui, hono, apache-tika-fips, nuxeo, celeborn, opensearch-fips,...

CVE-2026-54515 vulnerabilities

Vulnerabilities for packages: apache-pulsar, nextflow, tez, airflow, zipkin, cassandra-reaper, confluent-common-docker, management-api-for-apache-cassandra-5.0, jenkins, apache-tika, kafka, thingsboard, apache-nifi, spdx-tools-java, zookeeper, logstash, ruby3.2-jrjackson, apicurio-registry, solr,...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: apache-pulsar, nextflow, tez, airflow, zipkin, cassandra-reaper, confluent-common-docker, management-api-for-apache-cassandra-5.0, jenkins, apache-tika, kafka, thingsboard, apache-nifi, spdx-tools-java, zookeeper, logstash, ruby3.2-jrjackson, apicurio-registry, solr,...

CLEANSTART-2026-RD06185 Security fixes for CVE-2024-29371, CVE-2026-1225, CVE-2026-24281, CVE-2026-24308, CVE-2026-42577, CVE-2026-42583, ghsa-25qh-j22f-pwp8, ghsa-3677-xxcr-wjqv, ghsa-72hv-8253-57qq, ghsa-7xrh-hqfc-g7qr, ghsa-crhr-qqj8-rpxc, ghsa-mj4r-2hfc-f8p6, ghsa-qqpg-mvqg-649v, ghsa-rwm7-x88c-3g2p applied in versions: 7.6.9-r2, 7.6.9-r3, 7.6.9-r4, 7.6.9-r5

Multiple security vulnerabilities affect the confluent-common-docker package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, octo-sts, confluent-common-docker, vault-benchmark, vault-k8s, kube-vip, dagdotdev, container-object-storage-interface, cloud-provider-aws, blobfuse2, newrelic-nri-statsd, k8sgpt-operator, checksec, kubeflow-katib, pvc-autoresizer,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: vexctl, kubeflow-katib, prometheus-node-exporter-fips, pvc-autoresizer, bank-vaults, memcached-exporter-fips, prometheus-beat-exporter-fips, k8sgpt-operator, configmap-reload-fips, node-problem-detector-fips, etcd-fips, knative-serving, vault-k8s,...

CVE-2025-52999 vulnerabilities

Vulnerabilities for packages: spark, tez, cassandra-reaper, scala, gradle-stage0, druid, confluent-common-docker, cassandra...

GHSA-H46C-H94J-95F3 vulnerabilities

Vulnerabilities for packages: spark, tez, cassandra-reaper, scala, gradle-stage0, druid, confluent-common-docker, cassandra...

GHSA-WXR5-93PH-8WR9 vulnerabilities

Vulnerabilities for packages: trino, apache-nifi, spdx-tools-java, tez, jenkins-plugin-manager, confluent-common-docker, cassandra-reaper, opensearch, wildfly, apicurio-registry, druid, akhq, celeborn, jenkins, sonarqube, strimzi-kafka-operator, apache-activemq-artemis...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: kafka, tez, confluent-kafka-jre-bcfips, neo4j, ghidra, apache-nifi, sonarqube, apache-activemq-artemis, opensearch, druid, apicurio-registry, trino, solr, strimzi-kafka-operator, hadoop-fips, spdx-tools-java, solr-fips, wildfly, akhq, celeborn, confluent-common-docke...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: metacontroller, kubernetes-dashboard-metrics-scraper, kubernetes-event-exporter, kafka-proxy, falcosidekick, sftpgo-plugin-kms, swagger, nri-prometheus, k8sgpt, gke-gcloud-auth-plugin, oras, bank-vaults, metrics-server, kubewatch, sftpgo-plugin-pubsub, gobuster,...