CLEANSTART-2026-CI10932 In Eclipse Jetty, a first HTTP/1

Security vulnerability affects the kafka package. In Eclipse Jetty, a first HTTP/1...

CLEANSTART-2026-HL20029 JLine is a Java library for handling console input

Multiple security vulnerabilities affect the kafka package. JLine is a Java library for handling console input. See references for individual vulnerability details...

GHSA-XX22-P4CH-683R vulnerabilities

Vulnerabilities for packages: cassandra-fips, commercial-elasticsearch, flink-kubernetes-operator, debezium, confluent-kafka-jre-bcfips, kafka-fips, apicurio-registry-fips, kafka, akhq, apache-hop, spark-fips, apache-pulsar, debezium-connector-ibmi, sonarqube, elasticsearch-fips, traccar-fips,...

GHSA-7P3P-8QV8-M2VH vulnerabilities

Vulnerabilities for packages: automq-fips, confluent-kafka-jre-bcfips, kafka-fips, kafka, akhq, apache-hop, neo4j, spark-fips, reposilite, traccar-fips, apache-tika, dependency-track, apache-tika-fips, strimzi-kafka-operator, jenkins, strimzi-kafka-operator-fips, cruise-control,...

CLEANSTART-2026-VH00240 Security fixes for CVE-2024-45993, CVE-2025-11143, CVE-2025-31344, CVE-2026-1605, CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142, CVE-2026-27145, CVE-2026-42504, CVE-2026-42507, ghsa-3677-xxcr-wjqv, ghsa-72hv-8253-57qq, ghsa-vc5p-v9hr-52mj applied in versions: 4.0.1-r0, 4.0.1-r1, 4.0.1-r2, 4.0.1-r3, 4.3.0-r0

Multiple security vulnerabilities affect the kafka package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PV53006 Security fixes for CVE-2025-67030, CVE-2026-33811, CVE-2026-33814, CVE-2026-34479, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-6fmv-xxpf-w3cw, ghsa-72hv-8253-57qq applied in versions: 8.2.0-r0, 8.2.0-r1, 8.2.0-r2

Multiple security vulnerabilities affect the confluent-kafka package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OO47906 Security fixes for GHSA-VC5P-V9HR-52MJ applied in versions: 4.1.1-r0

Security vulnerability affects the kafka package. This issue is resolved in later releases. See references for vulnerability details...

Malicious Package

Overview confluent-kafka is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Critical Photon OS Security Update - PHSA-2025-4.0-0834

Updates of 'linux', 'libxml2', 'kafka' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2025-5.0-0537

Updates of 'apache-tomcat9', 'wireshark', 'cpio', 'apache-tomcat10', 'kafka' packages of Photon OS have been released...

CVE-2025-22869 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storage, opentelemetry-collector, glab, helm-operator, tkn, crossplane-provider-aws-s3, neuvector-sigstore-interface, authservice, crossplane-provider-azure, gptscript, kubernetes-event-exporter, x509-certificate-exporter, spqr,...

CVE-2024-7254 vulnerabilities

Vulnerabilities for packages: emsdk, confluent-kafka-jre-bcfips, kafka, ruby3.4-fluentd-kubernetes-daemonset, hadoop-client-modules, thingsboard, hadoop-fips, ruby3.2-fluentd-kubernetes-daemonset, camunda-zeebe, wavefront-proxy, ruby3.3-fluentd-kubernetes-daemonset, tez, kube-fluentd-operator,...

CVE-2023-44981 vulnerabilities

Vulnerabilities for packages: trino...

CVE-2023-43642 vulnerabilities

Vulnerabilities for packages: druid...

PT-2023-6224

Name of the Vulnerable Software and Affected Versions Cortex XSOAR affected versions not specified Description The issue is related to the unencrypted storage of certificate key data in the Kafka package for message and topic management on the Cortex XSOAR security, automation, and response...