CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: docker-credential-ecr-login, k8sgpt-operator, lvm-driver, octo-sts, secrets-store-csi-driver-provider-aws, addon-resizer, vexctl, newrelic-nri-statsd, cloud-provider-aws, rancher-machine, confluent-common-docker, local-path-provisioner, custom-pod-autoscaler-operator...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: prometheus-bind-exporter, sftpgo-plugin-pubsub, terraform-provider-sendgrid-fips, secrets-store-csi-driver-fips, yace-fips, bank-vaults, secrets-store-csi-driver-provider-aws, node-problem-detector-fips, karma-fips, prometheus-adapter, eks-distro-fips, vault-benchmar...

Malicious code in confluent-examples-nodejs (npm)

The package confluent-examples-nodejs was found to contain malicious code...

MAL-2025-17485 Malicious code in confluent-examples-nodejs (npm)

The package confluent-examples-nodejs was found to contain malicious code...

CVE-2025-52999 vulnerabilities

Vulnerabilities for packages: gradle-stage0, confluent-common-docker, tez, spark, druid, cassandra-reaper, scala, cassandra...

GHSA-H46C-H94J-95F3 vulnerabilities

Vulnerabilities for packages: gradle-stage0, confluent-common-docker, tez, spark, druid, cassandra-reaper, scala, cassandra...

GHSA-WXR5-93PH-8WR9 vulnerabilities

Vulnerabilities for packages: wildfly, confluent-common-docker, tez, apache-activemq-artemis, opensearch, apicurio-registry, jenkins-plugin-manager, spdx-tools-java, strimzi-kafka-operator, druid, celeborn, jenkins, trino, cassandra-reaper, sonarqube, apache-nifi, akhq...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: opensearch, druid, apicurio-registry, jenkins-plugin-manager, wildfly, hadoop-fips, tez, confluent-kafka-jre-bcfips, strimzi-kafka-operator, jenkins, confluent-common-docker, sonarqube, trino, apache-nifi, camunda-zeebe, solr, neo4j, kafka, spdx-tools-java, celeborn,...

MAL-2025-4148 Malicious code in @confluent-cfet-medusa/dataset-designer (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @confluent-cfet-medusa/dataset-designer (npm)

--- -= Per source details. Do not edit below this line.=-...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: karma, kubecolor, dataplaneapi, nri-f5, dex, aws-signer-notation-plugin, kubernetes-csi-driver-hostpath, kiali, policy-controller, sftpgo-plugin-kms, cert-manager-webhook-pdns, distribution, ko, helm-operator, hcloud, src-fingerprint, kubernetes-dashboard-api,...

GHSA-QH8G-58PP-2WXH vulnerabilities

Vulnerabilities for packages: reposilite, apache-pulsar, cloudwatch-exporter, zaproxy, spark-kubernetes-operator-fips, apache-tika-fips, confluent-kafka, confluent-kafka-jre-bcfips, zookeeper, clojure-tools, zookeeper-fips, spark-fips, apache-pulsar-fips, pinot-fips, trino, apache-nifi, solr,...

GHSA-G8M5-722R-8WHQ vulnerabilities

Vulnerabilities for packages: spark-fips, zookeeper, kafka, cloudwatch-exporter, apache-nifi, druid, strimzi-kafka-operator, solr, zookeeper-fips, apache-tika, confluent-kafka, spark, cassandra-reaper, confluent-kafka-jre-bcfips, celeborn...

CVE-2024-8184 vulnerabilities

Vulnerabilities for packages: spark-fips, zookeeper, kafka, cloudwatch-exporter, apache-nifi, druid, strimzi-kafka-operator, solr, zookeeper-fips, apache-tika, confluent-kafka, spark, cassandra-reaper, confluent-kafka-jre-bcfips, celeborn...

CVE-2024-6763 vulnerabilities

Vulnerabilities for packages: reposilite, apache-pulsar, cloudwatch-exporter, zaproxy, spark-kubernetes-operator-fips, apache-tika-fips, confluent-kafka, confluent-kafka-jre-bcfips, zookeeper, clojure-tools, zookeeper-fips, spark-fips, apache-pulsar-fips, pinot-fips, trino, apache-nifi, solr,...

CVE-2024-47554 vulnerabilities

Vulnerabilities for packages: opensearch, kserve-modelmesh, druid, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-4.0, wildfly, hadoop-fips, confluent-kafka, confluent-kafka-jre-bcfips, zookeeper, kserve, strimzi-kafka-operator, zookeeper-fips, confluent-common-docke...

GHSA-735F-PC8J-V9W8 vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, confluent-kafka, sonarqube-10, opensearch, kube-fluentd-operator, druid, celeborn, trino, thingsboard, wavefront-proxy, tez, apache-nifi...

CVE-2024-7254 vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, confluent-kafka, sonarqube-10, opensearch, kube-fluentd-operator, druid, celeborn, trino, thingsboard, wavefront-proxy, tez, apache-nifi...

Malicious code in confluent-docker-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bc7d66b033c3d09c07ce3226cd534199a9f8cb2200a79035526192fb140b94d9 The package is designed to exfiltrate basic data, like hostname and OS details, as well as collect information about the stacktrace it's imported from. ---...

MAL-2024-9963 Malicious code in confluent-docker-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bc7d66b033c3d09c07ce3226cd534199a9f8cb2200a79035526192fb140b94d9 The package is designed to exfiltrate basic data, like hostname and OS details, as well as collect information about the stacktrace it's imported from. ---...