CVE-2026-59949 vulnerabilities

Vulnerabilities for packages: debezium-connector-db2, spark, confluent-kafka, debezium, logstash, apicurio-registry, opensearch, akhq, druid, apache-pulsar, debezium-connector-informix, zipkin, debezium-connector-vitess, strimzi-kafka-operator, cassandra-reaper, debezium-connector-ibmi, cassandra...

CVE-2026-59949 vulnerabilities

Vulnerabilities for packages: hono, logstash-fips, seata, sonarqube, kafka, opensearch-fips, commercial-elasticsearch, spark-fips, traccar-fips, kafbat-ui-fips, apache-pulsar-fips, cassandra-reaper, akhq, debezium-connector-informix, pinot, kafka-bridge-fips, spark-kubernetes-operator,...

GHSA-XX22-P4CH-683R vulnerabilities

Vulnerabilities for packages: hono, logstash-fips, seata, sonarqube, kafka, opensearch-fips, commercial-elasticsearch, spark-fips, traccar-fips, kafbat-ui-fips, apache-pulsar-fips, cassandra-reaper, akhq, debezium-connector-informix, pinot, kafka-bridge-fips, spark-kubernetes-operator,...

GHSA-Q6CQ-MHR2-JMR5 vulnerabilities

Vulnerabilities for packages: hono, seata, apache-activemq-artemis, tez, apache-pulsar-fips, pinot, knative-kafka-broker, keycloak, apicurio-registry, apicurio-registry-fips, request-9047-keycloak-fips, thingsboard, neo4j, apache-hop, zipkin, hadoop-fips, keycloak-fips, celeborn, apache-pulsar,...

CVE-2026-55851 vulnerabilities

Vulnerabilities for packages: hono, seata, apache-activemq-artemis, tez, apache-pulsar-fips, pinot, knative-kafka-broker, keycloak, apicurio-registry, apicurio-registry-fips, request-9047-keycloak-fips, thingsboard, neo4j, apache-hop, zipkin, hadoop-fips, keycloak-fips, celeborn, apache-pulsar,...

GHSA-WH89-7897-X99H vulnerabilities

Vulnerabilities for packages: hono, seata, apache-activemq-artemis, tez, apache-pulsar-fips, pinot, knative-kafka-broker, keycloak, apicurio-registry, apicurio-registry-fips, request-9047-keycloak-fips, thingsboard, neo4j, apache-hop, zipkin, hadoop-fips, keycloak-fips, celeborn, apache-pulsar,...

CVE-2026-6790 vulnerabilities

Vulnerabilities for packages: apache-tika-fips, kafka, spark-fips, reposilite, traccar-fips, cruise-control, solr, akhq, spark-kubernetes-operator, strimzi-kafka-operator, traccar, apache-tika, solr-fips, strimzi-kafka-operator-fips, neo4j, apache-hop, confluent-kafka-jre-bcfips,...

GHSA-W7X5-G22V-XQHR vulnerabilities

Vulnerabilities for packages: kafka, spark-fips, reposilite, traccar-fips, solr, spark-kubernetes-operator, akhq, strimzi-kafka-operator, traccar, trino, solr-fips, strimzi-kafka-operator-fips, neo4j, apache-hop, confluent-kafka-jre-bcfips, spark-kubernetes-operator-fips, confluent-kafka, spark,...

CVE-2026-8384 vulnerabilities

Vulnerabilities for packages: kafka, spark-fips, reposilite, traccar-fips, solr, spark-kubernetes-operator, akhq, strimzi-kafka-operator, traccar, trino, solr-fips, strimzi-kafka-operator-fips, neo4j, apache-hop, confluent-kafka-jre-bcfips, spark-kubernetes-operator-fips, confluent-kafka, spark,...

CVE-2026-10051 vulnerabilities

Vulnerabilities for packages: kafka, spark-fips, reposilite, traccar-fips, solr, spark-kubernetes-operator, akhq, strimzi-kafka-operator, traccar, solr-fips, strimzi-kafka-operator-fips, neo4j, apache-hop, confluent-kafka-jre-bcfips, spark-kubernetes-operator-fips, confluent-kafka, spark,...

GHSA-F4V5-65JJ-PCR2 vulnerabilities

Vulnerabilities for packages: kafka, spark-fips, reposilite, traccar-fips, solr, spark-kubernetes-operator, akhq, strimzi-kafka-operator, traccar, solr-fips, strimzi-kafka-operator-fips, neo4j, apache-hop, confluent-kafka-jre-bcfips, spark-kubernetes-operator-fips, confluent-kafka, spark,...

GHSA-7P3P-8QV8-M2VH vulnerabilities

Vulnerabilities for packages: apache-tika-fips, kafka, spark-fips, reposilite, traccar-fips, cruise-control, solr, akhq, spark-kubernetes-operator, strimzi-kafka-operator, traccar, apache-tika, solr-fips, strimzi-kafka-operator-fips, neo4j, apache-hop, confluent-kafka-jre-bcfips,...

Vulnerabilities found in Oracle Financial Services

Oracle has identified vulnerabilities in various Financial Services modules. Oracle has also processed updates for various third-party products. The vulnerabilities include code injection through malicious schemes in Apache Avro, unauthorized access to sensitive data in various Oracle products, a...

Vulnerabilities in Oracle database products

Oracle has identified 158 vulnerabilities in Oracle Database Server, APEX, Autonomous Health Framework, Essbase, Global Lifecycle Management, GoldenGate, NoSQL Database, Spatial Studio, SQLDeveloper, and TimesTen In-Memory Database. Of these vulnerabilities, 91 originate from third-party products...

CVE-2026-56741 vulnerabilities

Vulnerabilities for packages: kafka, spark-fips, tez, apache-pulsar-fips, pinot, spark-kubernetes-operator, apache-hop, confluent-kafka-jre-bcfips, zookeeper-fips, hadoop-fips, spark-kubernetes-operator-fips, confluent-kafka, apache-pulsar, apache-nifi, apache-camel-karavan-devmode, spark,...

CVE-2026-56740 vulnerabilities

Vulnerabilities for packages: kafka, spark-fips, tez, apache-pulsar-fips, pinot, spark-kubernetes-operator, apache-hop, confluent-kafka-jre-bcfips, zookeeper-fips, hadoop-fips, spark-kubernetes-operator-fips, confluent-kafka, apache-pulsar, apache-nifi, apache-camel-karavan-devmode, spark,...

CVE-2026-56740 vulnerabilities

Vulnerabilities for packages: druid, zookeeper, tez, apache-pulsar, confluent-kafka, apache-nifi, kafka...

CVE-2026-56741 vulnerabilities

Vulnerabilities for packages: druid, zookeeper, tez, apache-pulsar, confluent-kafka, apache-nifi, kafka...

Apache Kafka Clients: Apache Kafka Clients: Information disclosure and data corruption due to race condition in producer buffer management

A flaw was found in the Apache Kafka Java producer client. A race condition in the client's buffer pool management can cause messages to be silently delivered to incorrect topics. This occurs when a message batch expires while its network request is still active, leading to premature buffer...

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.7 XP 6.0.5.GA release

JBoss EAP XP 6.0.5.GA release on the EAP 8.1 base. See references for release notes. This is a cumulative patch release zip for the JBoss EAP XP 6.0.5 runtime distribution for use with EAP 8.1.7. Security Fixes: kafka-clients: Apache Kafka Clients: Information disclosure and data corruption due t...