CVE-2026-56740 vulnerabilities

Vulnerabilities for packages: apache-nifi, druid, pinot, hadoop-client-modules, hadoop-fips, spark-kubernetes-operator-fips, kafka, apache-hop, confluent-kafka-jre-bcfips, spark-kubernetes-operator, apache-hop-fips, zookeeper-fips, apache-camel-karavan-devmode, spark-fips, pinot-fips, spark,...

CVE-2026-56741 vulnerabilities

Vulnerabilities for packages: apache-nifi, druid, pinot, hadoop-client-modules, hadoop-fips, spark-kubernetes-operator-fips, kafka, apache-hop, confluent-kafka-jre-bcfips, spark-kubernetes-operator, apache-hop-fips, zookeeper-fips, apache-camel-karavan-devmode, spark-fips, pinot-fips, spark,...

CVE-2026-56740 vulnerabilities

Vulnerabilities for packages: druid, kafka, tez, confluent-kafka, zookeeper, apache-nifi, apache-pulsar...

CVE-2026-56741 vulnerabilities

Vulnerabilities for packages: druid, kafka, tez, confluent-kafka, zookeeper, apache-nifi, apache-pulsar...

Malicious code in confluent-kafka-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20f9433c5da4c3ee143c33ec2a876e07ff01aa1188d0efa783858bcd0903d3c Analysis of this package version produced no static indicator and no traced behavioral findings. The tarball does not exhibit lifecycle-script...

MAL-2026-6682 Malicious code in confluent-kafka-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20f9433c5da4c3ee143c33ec2a876e07ff01aa1188d0efa783858bcd0903d3c Analysis of this package version produced no static indicator and no traced behavioral findings. The tarball does not exhibit lifecycle-script...

CVE-2026-54515 vulnerabilities

Vulnerabilities for packages: apache-nifi, druid, ruby3.4-jrjackson, hadoop-client-modules, elasticsearch-fips, logstash-fips, apicurio-registry-fips, spark-kubernetes-operator-fips, wildfly, s3proxy, kayenta-fips, spdx-tools-java, camunda-zeebe, flyway, kayenta, trino, strimzi-kafka-operator-fip...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: apache-nifi, druid, ruby3.4-jrjackson, hadoop-client-modules, elasticsearch-fips, logstash-fips, apicurio-registry-fips, spark-kubernetes-operator-fips, wildfly, s3proxy, kayenta-fips, spdx-tools-java, camunda-zeebe, flyway, kayenta, trino, strimzi-kafka-operator-fip...

CVE-2026-54515 vulnerabilities

Vulnerabilities for packages: dependency-track, gradle, zipkin, confluent-common-docker, cassandra, airflow, thingsboard, solr, kafka, cassandra-reaper, nextflow, jenkins, apicurio-registry, ruby4.0-jrjackson, keycloak, logstash, apache-nifi-registry, apache-tika, wildfly, trino, spdx-tools-java,...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: dependency-track, gradle, zipkin, confluent-common-docker, cassandra, airflow, thingsboard, solr, kafka, cassandra-reaper, nextflow, jenkins, apicurio-registry, ruby4.0-jrjackson, keycloak, logstash, apache-nifi-registry, apache-tika, wildfly, trino, spdx-tools-java,...

CVE-2026-45409 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, superset, py3-pipenv, kubeflow-volumes-web-app, datadog-agent, confluent-docker-utils, jwt-tool, kubeflow-jupyter-web-app, kserve, airflow, semgrep, open-webui, mlflow, reflex, kubeflow-pipelines-visualization-server, ggshield, kubeflow-katib,...

GHSA-65PC-FJ4G-8RJX vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, superset, py3-pipenv, kubeflow-volumes-web-app, datadog-agent, confluent-docker-utils, jwt-tool, kubeflow-jupyter-web-app, kserve, airflow, semgrep, open-webui, mlflow, reflex, kubeflow-pipelines-visualization-server, ggshield, kubeflow-katib,...

GHSA-65PC-FJ4G-8RJX vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.13-sdk, jwt-tool, azure-functions-host, openstack-tempest-2026.1, pgadmin4-fips, lmcache-cuda-12.8, metaflow-service, apache-beam-python-3.11-sdk, airflow-core, dbt-snowflake, py3-hashin, py3-pip, synapse, openstack-kolla-toolbox-2026.1-fips,...

CVE-2026-45409 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.13-sdk, jwt-tool, azure-functions-host, openstack-tempest-2026.1, pgadmin4-fips, lmcache-cuda-12.8, metaflow-service, apache-beam-python-3.11-sdk, airflow-core, dbt-snowflake, py3-hashin, py3-pip, synapse, openstack-kolla-toolbox-2026.1-fips,...

CLEANSTART-2026-LI56163 Security fixes for CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 1.0.8-r0, 1.0.8-r1

Multiple security vulnerabilities affect the confluent-cp-docker-utils package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RD06185 Security fixes for CVE-2024-29371, CVE-2026-1225, CVE-2026-24281, CVE-2026-24308, CVE-2026-42577, CVE-2026-42583, ghsa-25qh-j22f-pwp8, ghsa-3677-xxcr-wjqv, ghsa-72hv-8253-57qq, ghsa-7xrh-hqfc-g7qr, ghsa-crhr-qqj8-rpxc, ghsa-mj4r-2hfc-f8p6, ghsa-qqpg-mvqg-649v, ghsa-rwm7-x88c-3g2p applied in versions: 7.6.9-r2, 7.6.9-r3, 7.6.9-r4, 7.6.9-r5

Multiple security vulnerabilities affect the confluent-common-docker package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PV53006 Security fixes for CVE-2025-67030, CVE-2026-33811, CVE-2026-33814, CVE-2026-34479, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-6fmv-xxpf-w3cw, ghsa-72hv-8253-57qq applied in versions: 8.2.0-r0, 8.2.0-r1, 8.2.0-r2

Multiple security vulnerabilities affect the confluent-kafka package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2021-33923

Insecure permissions in Confluent Ansible cp-ansible 5.5.0, 5.5.1, 5.5.2 and 6.0.0 allows local attackers to access some sensitive information private keys, state database...

CVE-2021-33924

Confluent Ansible cp-ansible version 5.5.0, 5.5.1, 5.5.2 and 6.0.0 is vulnerable to Incorrect Access Control via its auxiliary component that allows remote attackers to access sensitive information...

MAL-2025-192405 Malicious code in confluent-kafka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f8f3691acc10147a767bd08facab31e59a8acfb8d38c89df1400e263cc6f8f The package confluent-kafka was found to contain malicious code. Source: ghsa-malware 135e8cf2cd5582b8ed8562c5f5ccfd1cf7265319ad340463b750b75e341858e...