56 matches found
Improper Certificate Validation
Overview confluent-kafka is a high-level Producer, Consumer and AdminClient compatible with all Apache KafkaTM broker Affected versions of this package are vulnerable to Improper Certificate Validation in HcVaultKmsClient.init in...
CLEANSTART-2026-WA75258 Security fix for GHSA-3677-xxcr-wjqv applied in: apache-nifi 2.7.2-r0, confluent-common-docker 7.6.9-r2, kafka 4.0.1-r0, kafka-fips 4.0.1-r0, kafka-fips 4.0.1-r1, schema-registry 7.7.7-r0
GHSA-3677-xxcr-wjqv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-QB24702 Security fix for CVE-2025-5115 applied in: schema-registry 7.7.8-r0, schema-registry 7.9.6-r0, solr 9.8.1-r1
CVE-2025-5115 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-VE14203 Security fix for CVE-2026-42778 applied in: apache-nifi 2.7.2-r7, apache-nifi 2.9.0-r1, schema-registry 7.9.6-r0, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0
CVE-2026-42778 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-NP40407 Security fix for CVE-2026-41635 applied in: apache-nifi 2.7.2-r7, apache-nifi 2.9.0-r1, schema-registry 7.9.6-r0, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0
CVE-2026-41635 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-TW68180 Security fix for CVE-2026-41409 applied in: apache-nifi 2.7.2-r7, apache-nifi 2.9.0-r1, schema-registry 7.9.6-r0, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0
CVE-2026-41409 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
com.github.piomin:spring-cloud-schema-registry-client-apicurio (2.0.0) potentially affected by CVE-2026-59304 via org.springframework.cloud:spring-cloud-stream-schema-registry-client (5.0.0)
org.springframework.cloud:spring-cloud-stream-schema-registry-client MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-stream-schema-registry-client and may be impacted: -...
Assignment to Variable without Use
Overview Affected versions of this package are vulnerable to Assignment to Variable without Use due to improper handling of content type caching. An attacker can cause incorrect processing of message content by manipulating the content type during message handling. Remediation Upgrade...
Assignment to Variable without Use
Overview Affected versions of this package are vulnerable to Assignment to Variable without Use due to improper handling of content type caching. An attacker can cause incorrect processing of message content by manipulating the content type during message handling. Remediation Upgrade...
Assignment to Variable without Use
Overview Affected versions of this package are vulnerable to Assignment to Variable without Use due to improper handling of content type caching. An attacker can cause incorrect processing of message content by manipulating the content type during message handling. Remediation Upgrade...
com.github.piomin:spring-cloud-schema-registry-client-apicurio (>=1.4.0, <=2.0.0) potentially affected by CVE-2026-59304 via org.springframework.cloud:spring-cloud-stream-schema-registry-client (>=4.3.1, <=5.0.0)
org.springframework.cloud:spring-cloud-stream-schema-registry-client MAVEN version =4.3.1, =1.4.0, =2.0.0 Source cves: CVE-2026-59304 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKCLOUD-19267415...
org.springframework.cloud:spring-cloud-stream-schema-registry-server (>=4.2.2, <=5.0.2) potentially affected by CVE-2026-59304 via org.springframework.cloud:spring-cloud-stream-schema-registry-core (>=4.2.2, <=5.0.2)
org.springframework.cloud:spring-cloud-stream-schema-registry-core MAVEN version =4.2.2, =4.2.2, =5.0.2 Source cves: CVE-2026-59304 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKCLOUD-19267416...
CVE-2026-44416
Remote Code Execution via Arbitrary Class Instantiation in plugin-schema-registry component in Apache Ranger = 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue...
CVE-2026-44416 Apache Ranger: Remote Code Execution via Arbitrary Class Instantiation
Remote Code Execution via Arbitrary Class Instantiation in plugin-schema-registry component in Apache Ranger = 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue...
CVE-2026-44416 Apache Ranger: Remote Code Execution via Arbitrary Class Instantiation
Remote Code Execution via Arbitrary Class Instantiation in plugin-schema-registry component in Apache Ranger = 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue...
CVE-2026-44416
Remote Code Execution via Arbitrary Class Instantiation in plugin-schema-registry component in Apache Ranger = 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue...
EUVD-2026-55250
Remote Code Execution via Arbitrary Class Instantiation in plugin-schema-registry component in Apache Ranger = 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue...
CVE-2026-44416 Apache Ranger: Remote Code Execution via Arbitrary Class Instantiation
Remote Code Execution via Arbitrary Class Instantiation in plugin-schema-registry component in Apache Ranger = 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue...
CVE-2026-44416
Remote Code Execution via Arbitrary Class Instantiation in plugin-schema-registry component in Apache Ranger = 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue...
PT-2026-69430
Name of the Vulnerable Software and Affected Versions Apache Ranger versions prior to 2.9.0 Description Remote Code Execution is possible through arbitrary class instantiation within the plugin-schema-registry component. Arbitrary class instantiation occurs when an application creates an instance...