GHSA-GX83-3VF8-GH7J vulnerabilities

Vulnerabilities for packages: elasticsearch, kafka, reposilite, tez, confluent-kafka-jre-bcfips, neo4j, zipkin, cassandra, datahub-frontend, drain-cleaner, dependency-track-apiserver, traccar-fips, kafka-fips, apache-tomee, nextflow, zookeeper, knative-kafka-broker, logstash,...

CVE-2026-68497 vulnerabilities

Vulnerabilities for packages: elasticsearch, kafka, reposilite, tez, confluent-kafka-jre-bcfips, neo4j, zipkin, cassandra, datahub-frontend, drain-cleaner, dependency-track-apiserver, traccar-fips, kafka-fips, apache-tomee, nextflow, zookeeper, knative-kafka-broker, strimzi-kafka-oauth-fips, solr...

GHSA-Q4XH-88C3-WMH7 vulnerabilities

Vulnerabilities for packages: elasticsearch, kafka, reposilite, tez, confluent-kafka-jre-bcfips, neo4j, zipkin, cassandra, datahub-frontend, drain-cleaner, dependency-track-apiserver, traccar-fips, kafka-fips, apache-tomee, nextflow, zookeeper, knative-kafka-broker, strimzi-kafka-oauth-fips, solr...

GHSA-WJGM-6HV5-3CVF vulnerabilities

Vulnerabilities for packages: elasticsearch, kafka, reposilite, tez, confluent-kafka-jre-bcfips, neo4j, zipkin, cassandra, datahub-frontend, drain-cleaner, dependency-track-apiserver, traccar-fips, kafka-fips, apache-tomee, nextflow, zookeeper, knative-kafka-broker, strimzi-kafka-oauth-fips, solr...

CVE-2026-19032 vulnerabilities

Vulnerabilities for packages: elasticsearch, kafka, reposilite, tez, confluent-kafka-jre-bcfips, neo4j, zipkin, cassandra, datahub-frontend, drain-cleaner, dependency-track-apiserver, traccar-fips, kafka-fips, apache-tomee, nextflow, zookeeper, knative-kafka-broker, strimzi-kafka-oauth-fips, solr...

CVE-2026-57836-Confluent_Kafka

CVE-2026-57836: Disabled TLS Certificate Verification for HashiCorp Vault KMS in confluent-kafka Severity: High, CVSS 3.1 7.4 Vector v3.1: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected: confluent-kafka = 2.8.0, = 2.14.2 Fixed in: 2.15.0 CWE: CWE-295 Improper Certificate Validation...

CLEANSTART-2026-JM74413 Security fix for CVE-2025-11226 applied in: cassandra 5.0.6-r2, cassandra 5.0.8-r1, cassandra-fips 4.0.19-r3, cassandra-fips 4.1.10-r2, cassandra-fips 5.0.5-r0, cassandra-fips 5.0.6-r2, cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4, cassandra-reaper-fips 4.0.1-r1, confluent-common-docker 7.6.9-r3, kserve-modelmesh 0.10.0-r0, kserve-modelmesh 0.12.0-r0, schema-registry 7.7.8-r1, stargate 1.0.90-r4

CVE-2025-11226 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AT07752 Security fix for CVE-2024-29371 applied in: apache-nifi 2.6.0-r3, apache-nifi 2.7.2-r7, confluent-common-docker 7.6.9-r2, strimzi-kafka-operator 0.47.0-r2

CVE-2024-29371 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CVE-2026-86792: Use of Externally-Controlled Input to Select Classes or Code

Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found in a Kafka connection's extra field into Python callables via importstring, with no allowlist, and hand them to the confluent-kafka client which invokes them. Deployments that have enabled the Kafk...

CVE-2026-83557 vulnerabilities

Vulnerabilities for packages: elasticsearch, kafka, reposilite, tez, confluent-kafka-jre-bcfips, neo4j, zipkin, cassandra, datahub-frontend, drain-cleaner, dependency-track-apiserver, traccar-fips, kafka-fips, apache-tomee, nextflow, zookeeper, knative-kafka-broker, logstash,...

CLEANSTART-2026-KQ29054 Security fixes in confluent-kafka 8.3.0-r1

Package confluent-kafka version 8.3.0-r1 fixes 14 vulnerabilities: CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54516, CVE-2026-54517...

CLEANSTART-2026-GX16359 Security fixes in confluent-common-docker 7.6.9-r3

Package confluent-common-docker version 7.6.9-r3 fixes 4 vulnerabilities: CVE-2025-11226, CVE-2026-1225, ghsa-25qh-j22f-pwp8, ghsa-qqpg-mvqg-649v...

CLEANSTART-2026-NG34780 Security fixes in confluent-kafka 8.2.0-r1

Package confluent-kafka version 8.2.0-r1 fixes 3 vulnerabilities: ghsa-72hv-8253-57qq, ghsa-6fmv-xxpf-w3cw, CVE-2025-67030...

CLEANSTART-2026-KF39510 Security fixes in confluent-common-docker 7.6.9-r5

Package confluent-common-docker version 7.6.9-r5 fixes 2 vulnerabilities: ghsa-rwm7-x88c-3g2p, CVE-2026-42577...

CLEANSTART-2026-OL08873 Security fixes in confluent-common-docker 7.6.9-r2

Package confluent-common-docker version 7.6.9-r2 fixes 7 vulnerabilities: CVE-2026-24281, CVE-2026-24308, CVE-2024-29371, ghsa-7xrh-hqfc-g7qr, ghsa-crhr-qqj8-rpxc...

CLEANSTART-2026-AU09596 Security fixes in confluent-kafka 8.2.0-r0

Package confluent-kafka version 8.2.0-r0 fixes 7 vulnerabilities: CVE-2026-34477, CVE-2026-34478, CVE-2026-34479, CVE-2026-34480, CVE-2026-2332...

CVE-2026-6790 vulnerabilities

Vulnerabilities for packages: solr, druid, dependency-track, apache-tika, cloudwatch-exporter, akhq, confluent-kafka, neo4j, strimzi-kafka-operator...

CVE-2026-10050 vulnerabilities

Vulnerabilities for packages: trino, solr, druid, dependency-track, tez, apache-tika, cloudwatch-exporter, akhq, confluent-kafka, neo4j...

CVE-2026-10051 vulnerabilities

Vulnerabilities for packages: trino, solr, druid, dependency-track, akhq, confluent-kafka, neo4j, strimzi-kafka-operator...

GHSA-7P3P-8QV8-M2VH vulnerabilities

Vulnerabilities for packages: solr, druid, dependency-track, apache-tika, cloudwatch-exporter, akhq, confluent-kafka, neo4j, strimzi-kafka-operator...