GHSA-642R-3GJ9-2PJ5 vulnerabilities

Vulnerabilities for packages: apache-tika, apicurio-registry, gradle, tez, keycloak, wildfly, dependency-track, scala, infinispan, apache-nifi-registry, cass-config-builder, apache-nifi, sonarqube, keycloak-config-cli, druid, trino, strimzi-kafka-operator, spark, logstash, spdx-tools-java, akhq,...

CVE-2026-68494 vulnerabilities

Vulnerabilities for packages: apache-tika, apicurio-registry, gradle, tez, keycloak, wildfly, dependency-track, scala, infinispan, apache-nifi-registry, cass-config-builder, apache-nifi, sonarqube, keycloak-config-cli, druid, trino, strimzi-kafka-operator, spark, logstash, spdx-tools-java, akhq,...

CVE-2026-89425 vulnerabilities

Vulnerabilities for packages: dependency-track-apiserver, camunda, logstash-fips, kafbat-ui, wavefront-proxy, management-api-for-apache-cassandra-5.0, camunda-zeebe, request-9047-keycloak-fips, hono, opensearch, kates-fips, apache-nifi-registry, metabase, cass-config-builder, strimzi-kafka-oauth,...

GHSA-7HHH-6RMP-J9QF vulnerabilities

Vulnerabilities for packages: dependency-track-apiserver, camunda, logstash-fips, kafbat-ui, wavefront-proxy, management-api-for-apache-cassandra-5.0, camunda-zeebe, request-9047-keycloak-fips, hono, opensearch, kates-fips, apache-nifi-registry, metabase, cass-config-builder, strimzi-kafka-oauth,...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: dependency-track-apiserver, camunda, logstash-fips, kafbat-ui, wavefront-proxy, management-api-for-apache-cassandra-5.0, camunda-zeebe, request-9047-keycloak-fips, hono, opensearch, kates-fips, apache-nifi-registry, metabase, cass-config-builder, strimzi-kafka-oauth,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: dependency-track-apiserver, camunda, logstash-fips, kafbat-ui, wavefront-proxy, management-api-for-apache-cassandra-5.0, camunda-zeebe, request-9047-keycloak-fips, hono, opensearch, kates-fips, apache-nifi-registry, metabase, cass-config-builder, strimzi-kafka-oauth,...

CVE-2026-89425 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, celeborn, gradle, tez, jenkins-plugin-manager, wildfly, dependency-track, cass-config-builder, strimzi-kafka-oauth, cassandra-reaper, wavefront-proxy, cassandra, strimzi-kafka-operator, logstash, spdx-tools-java, akhq,...

GHSA-7HHH-6RMP-J9QF vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, celeborn, gradle, tez, jenkins-plugin-manager, wildfly, dependency-track, cass-config-builder, strimzi-kafka-oauth, cassandra-reaper, wavefront-proxy, cassandra, strimzi-kafka-operator, logstash, spdx-tools-java, akhq,...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, celeborn, gradle, tez, jenkins-plugin-manager, wildfly, dependency-track, cass-config-builder, strimzi-kafka-oauth, cassandra-reaper, wavefront-proxy, cassandra, strimzi-kafka-operator, logstash, spdx-tools-java, akhq,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, celeborn, gradle, tez, jenkins-plugin-manager, wildfly, dependency-track, cass-config-builder, strimzi-kafka-oauth, cassandra-reaper, wavefront-proxy, cassandra, strimzi-kafka-operator, logstash, spdx-tools-java, akhq,...

kafka-keycloak-oauth

Apache Kafka 4.1.0 with Keycloak OAuth2 Authentication Production-ready Apache Kafka 4.1.0 KRaft mode with Keycloak 26.1.1 OAuth2/OIDC authentication using Strimzi Kafka image. Why This Project vs kafka-oauth-keycloak-tls-demo This is an evolution of the previous POC with significant improvements...

CLEANSTART-2026-UV31886 Security fix for CVE-2024-31573 applied in: strimzi-kafka-operator 0.47.0-r2

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YR80525 Security fix for CVE-2024-30171 applied in: strimzi-kafka-operator 0.47.0-r2

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-GK84785 Security fix for CVE-2024-29857 applied in: strimzi-kafka-operator 0.47.0-r2

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AT07752 Security fix for CVE-2024-29371 applied in: apache-nifi 2.6.0-r3, apache-nifi 2.7.2-r7, confluent-common-docker 7.6.9-r2, strimzi-kafka-operator 0.47.0-r2

CVE-2024-29371 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ML52514 Security fix for CVE-2022-42889 applied in: strimzi-kafka-operator 0.47.0-r2

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TZ12135 Security fix for CVE-2024-26308 applied in: apache-hive 4.0.0-r1, spark-sc212-jdk17-py311 3.4.4-r0, spark-sc213-jdk17-py312 3.5.8-r0, strimzi-kafka-operator 0.47.0-r2

CVE-2024-26308 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HE16906 Security fix for CVE-2024-25710 applied in: apache-hive 4.0.0-r1, spark-sc212-jdk17-py311 3.4.4-r0, spark-sc213-jdk17-py312 3.5.8-r0, strimzi-kafka-operator 0.47.0-r2

CVE-2024-25710 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TU89159 Security fix for CVE-2025-58057 applied in: apache-hive 4.0.0-r0, apache-hive 4.2.0-r1, cassandra 5.0.6-r2, cassandra-fips 5.0.6-r2, cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4, cassandra-reaper-fips 3.8.0-r9, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kogito-apps 10.1.0-r0, stargate 1.0.90-r4, stargate 2.0.44-r4, strimzi-kafka-operator 0.46.1-r4, strimzi-kafka-operator 0.47.0-r3, wavefront-proxy 13.9-r0

CVE-2025-58057 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BZ08231 Security fix for CVE-2026-6790 applied in: apache-hive 4.0.1-r8, apache-nifi 2.10.0-r3, apache-zookeeper 3.9.5-r8, cassandra-reaper-fips 3.8.0-r9, cassandra-reaper-fips 4.0.2-r3, cassandra-reaper-fips 4.1.1-r1, solr 10.0.0-r6, strimzi-kafka-operator 1.1.0-r2, trino 480-r10, trino 483-r1

CVE-2026-6790 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...