GHSA-WH89-7897-X99H vulnerabilities

Vulnerabilities for packages: knative-kafka-broker-fips, knative-kafka-broker, hadoop-fips, neo4j, request-9047-keycloak-fips, apache-hop, tez, apicurio-registry-fips, hono, pinot, apache-pulsar, floci, apache-activemq-artemis, zipkin, seata, keycloak-fips, celeborn, apache-hop-fips,...

GHSA-Q6CQ-MHR2-JMR5 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker-fips, knative-kafka-broker, hadoop-fips, neo4j, request-9047-keycloak-fips, apache-hop, tez, apicurio-registry-fips, hono, pinot, apache-pulsar, floci, apache-activemq-artemis, zipkin, seata, keycloak-fips, celeborn, apache-hop-fips,...

GHSA-W7X5-G22V-XQHR vulnerabilities

Vulnerabilities for packages: akhq, reposilite, spark-kubernetes-operator, neo4j, apache-hop, jenkins, traccar-fips, dependency-track, druid, solr-fips, spark-kubernetes-operator-fips, confluent-kafka-jre-bcfips, traccar, spark, solr, trino, strimzi-kafka-operator-fips, confluent-kafka,...

CVE-2026-6790 vulnerabilities

Vulnerabilities for packages: cruise-control-fips, akhq, apache-tika-fips, reposilite, spark-kubernetes-operator, neo4j, apache-hop, jenkins, traccar-fips, dependency-track, druid, solr-fips, spark-kubernetes-operator-fips, confluent-kafka-jre-bcfips, traccar, spark, solr,...

CVE-2026-8384 vulnerabilities

Vulnerabilities for packages: akhq, reposilite, spark-kubernetes-operator, neo4j, apache-hop, jenkins, traccar-fips, dependency-track, druid, solr-fips, spark-kubernetes-operator-fips, confluent-kafka-jre-bcfips, traccar, spark, solr, trino, strimzi-kafka-operator-fips, confluent-kafka,...

GHSA-F4V5-65JJ-PCR2 vulnerabilities

Vulnerabilities for packages: akhq, reposilite, spark-kubernetes-operator, neo4j, apache-hop, jenkins, traccar-fips, dependency-track, druid, solr-fips, spark-kubernetes-operator-fips, confluent-kafka-jre-bcfips, traccar, spark, solr, strimzi-kafka-operator-fips, confluent-kafka, apache-hop-fips,...

CVE-2026-10051 vulnerabilities

Vulnerabilities for packages: akhq, reposilite, spark-kubernetes-operator, neo4j, apache-hop, jenkins, traccar-fips, dependency-track, druid, solr-fips, spark-kubernetes-operator-fips, confluent-kafka-jre-bcfips, traccar, spark, solr, strimzi-kafka-operator-fips, confluent-kafka, apache-hop-fips,...

GHSA-7P3P-8QV8-M2VH vulnerabilities

Vulnerabilities for packages: cruise-control-fips, akhq, apache-tika-fips, reposilite, spark-kubernetes-operator, neo4j, apache-hop, jenkins, traccar-fips, dependency-track, druid, solr-fips, spark-kubernetes-operator-fips, confluent-kafka-jre-bcfips, traccar, spark, solr,...

Vulnerabilities found in Oracle Financial Services

Oracle has identified vulnerabilities in various Financial Services modules. Oracle has also processed updates for various third-party products. The vulnerabilities include code injection through malicious schemes in Apache Avro, unauthorized access to sensitive data in various Oracle products, a...

Vulnerabilities in Oracle database products

Oracle has identified 158 vulnerabilities in Oracle Database Server, APEX, Autonomous Health Framework, Essbase, Global Lifecycle Management, GoldenGate, NoSQL Database, Spatial Studio, SQLDeveloper, and TimesTen In-Memory Database. Of these vulnerabilities, 91 originate from third-party products...

CVE-2026-56741 vulnerabilities

Vulnerabilities for packages: zookeeper, spark-kubernetes-operator, hadoop-fips, apache-nifi, apache-hop, tez, druid, spark-kubernetes-operator-fips, confluent-kafka-jre-bcfips, pinot, spark, apache-camel-karavan-devmode, apache-pulsar, hadoop-client-modules, confluent-kafka, apache-hop-fips,...

CVE-2026-56740 vulnerabilities

Vulnerabilities for packages: zookeeper, spark-kubernetes-operator, hadoop-fips, apache-nifi, apache-hop, tez, druid, spark-kubernetes-operator-fips, confluent-kafka-jre-bcfips, pinot, spark, apache-camel-karavan-devmode, apache-pulsar, hadoop-client-modules, confluent-kafka, apache-hop-fips,...

CVE-2026-56740 vulnerabilities

Vulnerabilities for packages: tez, apache-pulsar, zookeeper, apache-nifi, druid, kafka, confluent-kafka...

CVE-2026-56741 vulnerabilities

Vulnerabilities for packages: tez, apache-pulsar, zookeeper, apache-nifi, druid, kafka, confluent-kafka...

Apache Kafka Clients: Apache Kafka Clients: Information disclosure and data corruption due to race condition in producer buffer management

A flaw was found in the Apache Kafka Java producer client. A race condition in the client's buffer pool management can cause messages to be silently delivered to incorrect topics. This occurs when a message batch expires while its network request is still active, leading to premature buffer...

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.7 XP 6.0.5.GA release

JBoss EAP XP 6.0.5.GA release on the EAP 8.1 base. See references for release notes. This is a cumulative patch release zip for the JBoss EAP XP 6.0.5 runtime distribution for use with EAP 8.1.7. Security Fixes: kafka-clients: Apache Kafka Clients: Information disclosure and data corruption due t...

Malicious code in dwh-kafka-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f8759150fd0f4909a75613b1311c70c44b514bee2142ed4c67e0ef580afdbe The pypi package dwh-kafka-client 0.0.1 presents itself as a Kafka client but ships no Kafka functionality — the advertised DwhKafkaClient class in...

The vulnerability of the API CONSUMER_GROUP_DESCRIBE mechanism used by the Apache Kafka messaging broker allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the API CONSUMERGROUPDESCRIBE mechanism used by the Apache Kafka messaging broker is related to deficiencies in the authorization process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2026-54775

CoreWCF is a port of the service side of Windows Communication Foundation WCF to .NET Core. Prior to 1.8.1 and 1.9.1, a CoreWCF service listening on a Kafka topic stops processing new records from that topic when KafkaTransportPump receives a null-value tombstone record, causing a persistent...

CVE-2026-54775 CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.

CoreWCF is a port of the service side of Windows Communication Foundation WCF to .NET Core. Prior to 1.8.1 and 1.9.1, a CoreWCF service listening on a Kafka topic stops processing new records from that topic when KafkaTransportPump receives a null-value tombstone record, causing a persistent...