GHSA-W9FJ-CFPG-GRVV vulnerabilities

Vulnerabilities for packages: sonarqube, keycloak, druid, grpc-java-fips, camunda, kafbat-ui-fips, management-api-for-apache-cassandra-4.1, hadoop-fips, wavefront-proxy, knative-kafka-broker, apache-pulsar, apache-hop, kafka-bridge, opensearch-fips, spark-fips, elasticsearch-fips, infinispan,...

CVE-2026-33871 vulnerabilities

Vulnerabilities for packages: sonarqube, keycloak, druid, grpc-java-fips, camunda, kafbat-ui-fips, management-api-for-apache-cassandra-4.1, hadoop-fips, wavefront-proxy, knative-kafka-broker, apache-pulsar, apache-hop, kafka-bridge, opensearch-fips, spark-fips, elasticsearch-fips, infinispan,...

CVE-2026-33870 vulnerabilities

Vulnerabilities for packages: sonarqube, keycloak, druid, grpc-java-fips, camunda, kafbat-ui-fips, logstash, management-api-for-apache-cassandra-4.1, hadoop-fips, wavefront-proxy, knative-kafka-broker, apache-pulsar, kafka-bridge, opensearch-fips, spark-fips, elasticsearch-fips, infinispan,...

GHSA-PWQR-WMGM-9RR8 vulnerabilities

Vulnerabilities for packages: sonarqube, keycloak, druid, grpc-java-fips, camunda, kafbat-ui-fips, logstash, management-api-for-apache-cassandra-4.1, hadoop-fips, wavefront-proxy, knative-kafka-broker, apache-pulsar, kafka-bridge, opensearch-fips, spark-fips, elasticsearch-fips, infinispan,...

Logstash 8.19.10, 9.1.10, 9.2.4 Security Update (ESA-2026-06)

Sensitive Information in Resource Not Removed Before Reuse in Logstash Leading to Access to Sensitive Information Dependency on Vulnerable Third-Party Component CWE-1395 exists in org.lz4:lz4-java decompression library used by logstash-integration-kafka plugin in Logstash that could allow an...

OESA-2026-1546 wireshark security update

Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer. Security Fixes: MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of...

A Bootiful Podcast: Spring Messaging Legend Soby Chacko

Hi, Spring fans! In this installment, we talk with the legendary Soby Chacko about Apache Kafka, Spring AI, and much more! apachekafka kafka...

GHSA-3CQM-MF7H-PRRJ vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, s3proxy-fips, s3proxy...

CVE-2021-0341 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, s3proxy-fips, s3proxy...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: stern, gcp-compute-persistent-disk-csi-driver, helm-docs, x509-certificate-exporter, whereabouts, minify, gogatekeeper, victoriametrics-cluster, rancher, gitlab-pages, azure-ipam, terraform-provider-tls, telegraf, crossplane-provider-family-aws, tetragon, spqr,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: stern, gcp-compute-persistent-disk-csi-driver, helm-docs, x509-certificate-exporter, whereabouts, minify, gogatekeeper, victoriametrics-cluster, rancher, gitlab-pages, azure-ipam, terraform-provider-tls, telegraf, crossplane-provider-family-aws, tetragon, spqr,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: stern, gcp-compute-persistent-disk-csi-driver, helm-docs, x509-certificate-exporter, whereabouts, minify, gogatekeeper, victoriametrics-cluster, rancher, gitlab-pages, azure-ipam, terraform-provider-tls, telegraf, crossplane-provider-family-aws, tetragon, spqr,...

CVE-2026-24308 vulnerabilities

Vulnerabilities for packages: druid, zookeeper, solr, apache-pulsar, spark-fips, zookeeper-fips, apache-activemq-artemis, thingsboard, strimzi-kafka-operator, spark-kubernetes-operator, apache-nifi, apache-pulsar-fips, wso2is, tez, kserve-modelmesh, pinot, seata, kafka, trino, akhq,...

GHSA-CRHR-QQJ8-RPXC vulnerabilities

Vulnerabilities for packages: druid, zookeeper, solr, apache-pulsar, spark-fips, zookeeper-fips, apache-activemq-artemis, thingsboard, strimzi-kafka-operator, spark-kubernetes-operator, apache-nifi, apache-pulsar-fips, wso2is, tez, kserve-modelmesh, pinot, seata, kafka, trino, akhq,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana-fips, pluto, json-exporter, kubernetes-csi-driver-hostpath, spire-controller-manager-fips, skopeo-fips, aws-sigv4-proxy-fips, configmap-reload-fips, jobset-fips, longhorn-manager, mcp-grafana, openbao-k8s, pulumi-language-yaml, cis-operator...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana-fips, json-exporter, kubernetes-csi-driver-hostpath, spire-controller-manager-fips, skopeo-fips, jobset-fips, mcp-grafana, longhorn-manager, pulumi-language-yaml, cerbos, kube-metrics-adapter, aws-load-balancer-controller,...

GHSA-XXH7-FCF3-RJ7F vulnerabilities

Vulnerabilities for packages: dependency-track, trino, akhq, strimzi-kafka-operator, apache-pulsar, confluent-kafka, druid, kafka, solr...

CVE-2026-1605 vulnerabilities

Vulnerabilities for packages: dependency-track, trino, akhq, strimzi-kafka-operator, apache-pulsar, confluent-kafka, druid, kafka, solr...

GHSA-XXH7-FCF3-RJ7F vulnerabilities

Vulnerabilities for packages: apache-hop, dependency-track-apiserver, strimzi-kafka-operator, apache-jena-fuseki, apache-hop-fips, jenkins, confluent-kafka, confluent-kafka-jre-bcfips, druid, apache-pulsar-fips, kafka, neo4j, trino, akhq, solr, kafka-fips, apache-pulsar, dependency-track...

CVE-2026-1605 vulnerabilities

Vulnerabilities for packages: apache-hop, dependency-track-apiserver, strimzi-kafka-operator, apache-jena-fuseki, apache-hop-fips, jenkins, confluent-kafka, confluent-kafka-jre-bcfips, druid, apache-pulsar-fips, kafka, neo4j, trino, akhq, solr, kafka-fips, apache-pulsar, dependency-track...