CLEANSTART-2026-GX16359 Security fixes in confluent-common-docker 7.6.9-r3

Package confluent-common-docker version 7.6.9-r3 fixes 4 vulnerabilities: CVE-2025-11226, CVE-2026-1225, ghsa-25qh-j22f-pwp8, ghsa-qqpg-mvqg-649v...

CLEANSTART-2026-KF39510 Security fixes in confluent-common-docker 7.6.9-r5

Package confluent-common-docker version 7.6.9-r5 fixes 2 vulnerabilities: ghsa-rwm7-x88c-3g2p, CVE-2026-42577...

CLEANSTART-2026-OL08873 Security fixes in confluent-common-docker 7.6.9-r2

Package confluent-common-docker version 7.6.9-r2 fixes 7 vulnerabilities: CVE-2026-24281, CVE-2026-24308, CVE-2024-29371, ghsa-7xrh-hqfc-g7qr, ghsa-crhr-qqj8-rpxc...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: opensearch, wavefront-proxy, jenkins, nextflow, airbyte-server, hono, confluent-kafka, apache-pulsar, apicurio-registry-fips, guacamole-client, sonarqube, elasticsearch-fips, nacos, apache-pulsar-fips, solr-fips, apache-activemq, druid, commercial-elasticsearch, spar...

CVE-2026-54515 vulnerabilities

Vulnerabilities for packages: trino, apache-nifi-registry, sonarqube, gradle, kserve-modelmesh, spark, cassandra-reaper, thingsboard, jenkins-plugin-manager, zookeeper, kafka, apache-tika, zipkin, flyway, tez, management-api-for-apache-cassandra-5.0, celeborn, confluent-common-docker,...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: trino, apache-nifi-registry, sonarqube, gradle, kserve-modelmesh, spark, cassandra-reaper, thingsboard, jenkins-plugin-manager, zookeeper, kafka, apache-tika, zipkin, flyway, tez, management-api-for-apache-cassandra-5.0, celeborn, confluent-common-docker,...

CLEANSTART-2026-RD06185 Security fixes for CVE-2024-29371, CVE-2026-1225, CVE-2026-24281, CVE-2026-24308, CVE-2026-42577, CVE-2026-42583, ghsa-25qh-j22f-pwp8, ghsa-3677-xxcr-wjqv, ghsa-72hv-8253-57qq, ghsa-7xrh-hqfc-g7qr, ghsa-crhr-qqj8-rpxc, ghsa-mj4r-2hfc-f8p6, ghsa-qqpg-mvqg-649v, ghsa-rwm7-x88c-3g2p applied in versions: 7.6.9-r2, 7.6.9-r3, 7.6.9-r4, 7.6.9-r5

Multiple security vulnerabilities affect the confluent-common-docker package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: bank-vaults, addon-resizer, terraform-provider-time, ctop, cloud-provider-aws, docker-credential-ecr-login, hivemind, local-path-provisioner, vault-k8s, vexctl, git-lfs, container-object-storage-interface, sftpgo-plugin-geoipfilter, sftpgo-plugin-pubsub, lvm-driver,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: rancher-machine, checksec, kserve-rest-proxy, gostatsd, php-fpmexporter, karpenter-fips, git-lfs, cluster-api, knative-eventing, terraform-provider-sendgrid-fips, prometheus-bind-exporter, kubernetes-csi-node-driver-registrar-fips, blobfuse2, azuredisk-csi-fips,...

CVE-2025-52999 vulnerabilities

Vulnerabilities for packages: scala, spark, tez, gradle-stage0, cassandra-reaper, druid, confluent-common-docker, cassandra...

GHSA-H46C-H94J-95F3 vulnerabilities

Vulnerabilities for packages: scala, spark, tez, gradle-stage0, cassandra-reaper, druid, confluent-common-docker, cassandra...

GHSA-WXR5-93PH-8WR9 vulnerabilities

Vulnerabilities for packages: akhq, apache-nifi, strimzi-kafka-operator, trino, sonarqube, tez, apicurio-registry, cassandra-reaper, apache-activemq-artemis, celeborn, confluent-common-docker, druid, jenkins-plugin-manager, spdx-tools-java, opensearch, jenkins, wildfly...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: opensearch, spdx-tools-java, jenkins, jenkins-plugin-manager, hadoop-client-modules, sonarqube, apicurio-registry, tez, cassandra-reaper, apache-nifi, wildfly, confluent-kafka-jre-bcfips, druid, apache-activemq-artemis, camunda-zeebe, kafka, strimzi-kafka-operator,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: pluto, spiffe-helper, cortex, k6, tflint, velero-plugin-for-microsoft-azure, gke-gcloud-auth-plugin, shfmt, terraform-docs, petname, containerd, kubernetes-dashboard-auth, sftpgo-plugin-kms, nri-nginx, cni-plugins, flux-image-automation-controller, nats, helm, ytt,...