CLEANSTART-2026-KB74242 Security fixes in strimzi-kafka-operator 1.1.0-r1

Package strimzi-kafka-operator version 1.1.0-r1 fixes 22 vulnerabilities: CVE-2026-42587, CVE-2026-47244, CVE-2026-48043, CVE-2026-50560, CVE-2026-54512...

CLEANSTART-2026-VJ08145 Security fixes in strimzi-kafka-operator 1.1.0-r2

Package strimzi-kafka-operator version 1.1.0-r2 fixes 25 vulnerabilities: CVE-2026-55831, CVE-2026-55833, CVE-2026-56745, CVE-2026-56746, CVE-2026-59898...

CLEANSTART-2026-FP77984 Security fixes in strimzi-kafka-operator 0.46.1-r3

Package strimzi-kafka-operator version 0.46.1-r3 fixes 10 vulnerabilities: CVE-2025-11143, CVE-2025-53864, CVE-2025-55163, CVE-2025-58056, CVE-2025-58057...

CLEANSTART-2026-XN43320 Security fixes in strimzi-kafka-operator 0.51.0-r1

Package strimzi-kafka-operator version 0.51.0-r1 fixes 11 vulnerabilities: CVE-2026-2332, CVE-2026-33871, CVE-2026-34477, CVE-2026-34478, CVE-2026-34480...

CVE-2026-56816 vulnerabilities

Vulnerabilities for packages: opensearch-fips, apache-hop, camunda, strimzi-kafka-operator-fips, spark-fips, strimzi-kafka-operator, camunda-zeebe, apache-hop-fips, spark, opensearch...

GHSA-HPCC-26XQ-25FV vulnerabilities

Vulnerabilities for packages: opensearch-fips, apache-hop, camunda, strimzi-kafka-operator-fips, spark-fips, strimzi-kafka-operator, camunda-zeebe, apache-hop-fips, spark, opensearch...

GHSA-HPCC-26XQ-25FV vulnerabilities

Vulnerabilities for packages: opensearch, strimzi-kafka-operator, spark...

CVE-2026-56816 vulnerabilities

Vulnerabilities for packages: opensearch, strimzi-kafka-operator, spark...

Unintended Proxy or Intermediary ('Confused Deputy')

Overview Affected versions of this package are vulnerable to Unintended Proxy or Intermediary 'Confused Deputy' via the Kafka.spec.entityOperator process. An attacker can gain unauthorized access to read and modify secrets in other namespaces by crafting a custom resource with the watchedNamespac...

CLEANSTART-2026-YX54699 race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics

Multiple security vulnerabilities affect the strimzi-kafka-operator package. A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics. See references for individual vulnerability details...

CLEANSTART-2026-RG24361 Security fixes for CVE-2025-11143, CVE-2026-1605, ghsa-72hv-8253-57qq, ghsa-cphf-4846-3xx9 applied in versions: 0.50.0-r0, 0.51.0-r0

Multiple security vulnerabilities affect the strimzi-kafka-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GQ14179 Security fixes for CVE-2025-11143, CVE-2025-53864, CVE-2025-55163, CVE-2025-58056, CVE-2025-58057, CVE-2025-67735, CVE-2025-68161, CVE-2026-1002, CVE-2026-1605, ghsa-72hv-8253-57qq applied in versions: 0.46.1-r3, 0.46.1-r4

Multiple security vulnerabilities affect the strimzi-kafka-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IA43044 Security fixes for CVE-2020-8908, CVE-2022-42889, CVE-2023-2976, CVE-2024-25710, CVE-2024-26308, CVE-2024-29371, CVE-2024-29857, CVE-2024-30171, CVE-2024-31573, CVE-2024-47554, CVE-2025-11143, CVE-2025-12383, CVE-2025-48734, CVE-2025-48924, CVE-2025-58057, CVE-2025-67735, CVE-2025-68161, CVE-2025-8916, CVE-2026-1002, CVE-2026-1605, ghsa-72hv-8253-57qq applied in versions: 0.47.0-r2, 0.47.0-r3

Multiple security vulnerabilities affect the strimzi-kafka-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DC73689 Security fixes for CVE-2025-11143, CVE-2025-67735, CVE-2025-68161, CVE-2026-1002, CVE-2026-1605, ghsa-72hv-8253-57qq applied in versions: 0.48.0-r1

Multiple security vulnerabilities affect the strimzi-kafka-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GM79879 Security fixes for CVE-2025-11143, CVE-2025-68161, CVE-2026-1002, CVE-2026-1605, ghsa-72hv-8253-57qq applied in versions: 0.49.1-r0

Multiple security vulnerabilities affect the strimzi-kafka-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DS86833 Security fixes for CVE-2025-11143, CVE-2026-1605, ghsa-72hv-8253-57qq, ghsa-cphf-4846-3xx9 applied in versions: 0.50.0-r0, 0.50.1-r0

Multiple security vulnerabilities affect the strimzi-kafka-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-1605 vulnerabilities

Vulnerabilities for packages: kafka, confluent-kafka, akhq, trino, druid, solr, apache-pulsar, dependency-track, strimzi-kafka-operator...

GHSA-XXH7-FCF3-RJ7F vulnerabilities

Vulnerabilities for packages: kafka, confluent-kafka, akhq, trino, druid, solr, apache-pulsar, dependency-track, strimzi-kafka-operator...

GHSA-XXH7-FCF3-RJ7F vulnerabilities

Vulnerabilities for packages: apache-jena-fuseki, kafka-fips, dependency-track-apiserver, apache-hop, apache-pulsar, dependency-track, confluent-kafka-jre-bcfips, neo4j, kafka, trino, druid, strimzi-kafka-operator, apache-pulsar-fips, confluent-kafka, apache-hop-fips, jenkins, akhq, solr...

CVE-2026-1605 vulnerabilities

Vulnerabilities for packages: apache-jena-fuseki, kafka-fips, dependency-track-apiserver, apache-hop, apache-pulsar, dependency-track, confluent-kafka-jre-bcfips, neo4j, kafka, trino, druid, strimzi-kafka-operator, apache-pulsar-fips, confluent-kafka, apache-hop-fips, jenkins, akhq, solr...