CLEANSTART-2026-VM44907 Security fix for GHSA-mhm7-754m-9p8w applied in: strimzi-kafka-operator 0.51.0-r4, kafka 4.2.0-r5

GHSA-mhm7-754m-9p8w affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OJ07374 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

Security vulnerability affects the strimzi-kafka-operator package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

CLEANSTART-2026-OG12992 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

Security vulnerability affects the strimzi-kafka-operator package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

CLEANSTART-2026-DQ63138 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

Security vulnerability affects the strimzi-kafka-operator package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

CLEANSTART-2026-ED66251 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

Security vulnerability affects the strimzi-kafka-operator package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

CLEANSTART-2026-BD93635 It is possible for outbound HTTP requests using a Micrometer-instrumented client to cause a denial-of-service (DoS) condition due to an unbounded memory leak

Security vulnerability affects the strimzi-kafka-operator package. It is possible for outbound HTTP requests using a Micrometer-instrumented client to cause a denial-of-service DoS condition due to an unbounded memory leak...

CLEANSTART-2026-AS15122 Using untrusted, non-normalized input as-is for metrics data (such as metric names, tag keys, or tag values) is a dangerous antipattern that general-purpose instrumentation should never perform

Security vulnerability affects the strimzi-kafka-operator package. Using untrusted, non-normalized input as-is for metrics data such as metric names, tag keys, or tag values is a dangerous antipattern that general-purpose instrumentation should never perform...

CLEANSTART-2026-UK08664 In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition

Security vulnerability affects the strimzi-kafka-operator package. In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition...

CLEANSTART-2026-SD29232 Out-of-bounds memory operations in org

Security vulnerability affects the strimzi-kafka-operator package. Out-of-bounds memory operations in org...

CLEANSTART-2026-BS35742 zstd-jni before 1

Security vulnerability affects the strimzi-kafka-operator package. zstd-jni before 1...

CLEANSTART-2026-JE63853 vulnerability has been found in luben zstd-jni up to 1

Security vulnerability affects the strimzi-kafka-operator package. A vulnerability has been found in luben zstd-jni up to 1...

CLEANSTART-2026-HZ12823 Vert

Security vulnerability affects the strimzi-kafka-operator package. The Vert...

CLEANSTART-2026-CK79983 Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1

Security vulnerability affects the strimzi-kafka-operator package. Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versions 1...

CLEANSTART-2026-SB90321 In Eclipse Vert

Security vulnerability affects the strimzi-kafka-operator package. In Eclipse Vert...

CLEANSTART-2026-EB50252 TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e

Security vulnerability affects the strimzi-kafka-operator package. A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e...

CLEANSTART-2026-WG41098 temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com

Security vulnerability affects the strimzi-kafka-operator package. A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com...

CLEANSTART-2026-YC22300 Netty (io

Security vulnerability affects the strimzi-kafka-operator package. Netty io...

CLEANSTART-2026-CW98636 In Eclipse Vert

Security vulnerability affects the strimzi-kafka-operator package. In Eclipse Vert...

CLEANSTART-2026-NB67850 In Eclipse Vert

Security vulnerability affects the strimzi-kafka-operator package. In Eclipse Vert...

CLEANSTART-2026-HT34208 Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients

Security vulnerability affects the strimzi-kafka-operator package. Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients...