CVE-2026-68494 vulnerabilities

Vulnerabilities for packages: apache-tika, infinispan, opensearch, logstash, gradle, scala, tez, keycloak-config-cli, apache-nifi, akhq, apache-nifi-registry, druid, wildfly, cass-config-builder, flyway, apicurio-registry, trino, keycloak, sonarqube, dependency-track, spdx-tools-java, spark,...

GHSA-642R-3GJ9-2PJ5 vulnerabilities

Vulnerabilities for packages: apache-tika, infinispan, opensearch, logstash, gradle, scala, tez, keycloak-config-cli, apache-nifi, akhq, apache-nifi-registry, druid, wildfly, cass-config-builder, flyway, apicurio-registry, trino, keycloak, sonarqube, dependency-track, spdx-tools-java, spark,...

CVE-2026-89425 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, apache-pulsar, strimzi-kafka-oauth, metabase, kafka-bridge-fips, pinot-fips, apicurio-registry-fips, automq, celeborn, seata, ontop-fips, kserve-modelmesh, apache-polaris, cruise-control-fips, cass-config-builder-fips, druid, s3proxy,...

GHSA-7HHH-6RMP-J9QF vulnerabilities

Vulnerabilities for packages: camunda-zeebe, apache-pulsar, strimzi-kafka-oauth, metabase, kafka-bridge-fips, pinot-fips, apicurio-registry-fips, automq, celeborn, seata, ontop-fips, kserve-modelmesh, apache-polaris, cruise-control-fips, cass-config-builder-fips, druid, s3proxy,...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, apache-pulsar, strimzi-kafka-oauth, metabase, kafka-bridge-fips, pinot-fips, apicurio-registry-fips, automq, celeborn, seata, ontop-fips, kserve-modelmesh, apache-polaris, cruise-control-fips, cass-config-builder-fips, druid, s3proxy,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, apache-pulsar, strimzi-kafka-oauth, metabase, kafka-bridge-fips, pinot-fips, apicurio-registry-fips, automq, celeborn, seata, ontop-fips, kserve-modelmesh, apache-polaris, cruise-control-fips, cass-config-builder-fips, druid, s3proxy,...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: celeborn, opensearch, management-api-for-apache-cassandra-5.0, logstash, gradle, cassandra, tez, kserve-modelmesh, cassandra-reaper, strimzi-kafka-oauth, keycloak-config-cli, akhq, thingsboard, neo4j, jenkins-plugin-manager, druid, wildfly, cass-config-builder,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: celeborn, opensearch, management-api-for-apache-cassandra-5.0, logstash, gradle, cassandra, tez, kserve-modelmesh, cassandra-reaper, strimzi-kafka-oauth, keycloak-config-cli, akhq, thingsboard, neo4j, jenkins-plugin-manager, druid, wildfly, cass-config-builder,...

GHSA-7HHH-6RMP-J9QF vulnerabilities

Vulnerabilities for packages: celeborn, opensearch, management-api-for-apache-cassandra-5.0, logstash, gradle, cassandra, tez, kserve-modelmesh, cassandra-reaper, strimzi-kafka-oauth, keycloak-config-cli, akhq, thingsboard, neo4j, jenkins-plugin-manager, druid, wildfly, cass-config-builder,...

CVE-2026-89425 vulnerabilities

Vulnerabilities for packages: celeborn, opensearch, management-api-for-apache-cassandra-5.0, logstash, gradle, cassandra, tez, kserve-modelmesh, cassandra-reaper, strimzi-kafka-oauth, keycloak-config-cli, akhq, thingsboard, neo4j, jenkins-plugin-manager, druid, wildfly, cass-config-builder,...

CLEANSTART-2026-ZX15129 Security fix for ghsa-cphf-4846-3xx9 applied in: incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.4.7-r3, keycloak 26.5.6-r5, kogito-apps 10.1.0-r0, spark-sc213-jdk17-py311 4.1.1-r2, strimzi-kafka-operator 0.50.0-r0

ghsa-cphf-4846-3xx9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UV31886 Security fix for CVE-2024-31573 applied in: strimzi-kafka-operator 0.47.0-r2

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YR80525 Security fix for CVE-2024-30171 applied in: strimzi-kafka-operator 0.47.0-r2

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-GK84785 Security fix for CVE-2024-29857 applied in: strimzi-kafka-operator 0.47.0-r2

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AT07752 Security fix for CVE-2024-29371 applied in: apache-nifi 2.6.0-r3, apache-nifi 2.7.2-r7, confluent-common-docker 7.6.9-r2, strimzi-kafka-operator 0.47.0-r2

CVE-2024-29371 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ML52514 Security fix for CVE-2022-42889 applied in: strimzi-kafka-operator 0.47.0-r2

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TZ12135 Security fix for CVE-2024-26308 applied in: apache-hive 4.0.0-r1, spark-sc212-jdk17-py311 3.4.4-r0, spark-sc213-jdk17-py312 3.5.8-r0, strimzi-kafka-operator 0.47.0-r2

CVE-2024-26308 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HE16906 Security fix for CVE-2024-25710 applied in: apache-hive 4.0.0-r1, spark-sc212-jdk17-py311 3.4.4-r0, spark-sc213-jdk17-py312 3.5.8-r0, strimzi-kafka-operator 0.47.0-r2

CVE-2024-25710 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QA30361 Security fix for ghsa-w35j-pv5h-q9q9 applied in: spark-sc213-jdk17-py311 4.1.1-r2, strimzi-kafka-operator 0.51.0-r1

ghsa-w35j-pv5h-q9q9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VS28854 Security fix for ghsa-c69g-56f8-xwqj applied in: hazelcast 5.7.0-r1, strimzi-kafka-operator 1.1.0-r2

ghsa-c69g-56f8-xwqj affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...