CLEANSTART-2026-GX16359 Security fixes in confluent-common-docker 7.6.9-r3

Package confluent-common-docker version 7.6.9-r3 fixes 4 vulnerabilities: CVE-2025-11226, CVE-2026-1225, ghsa-25qh-j22f-pwp8, ghsa-qqpg-mvqg-649v...

CLEANSTART-2026-KF39510 Security fixes in confluent-common-docker 7.6.9-r5

Package confluent-common-docker version 7.6.9-r5 fixes 2 vulnerabilities: ghsa-rwm7-x88c-3g2p, CVE-2026-42577...

CLEANSTART-2026-OL08873 Security fixes in confluent-common-docker 7.6.9-r2

Package confluent-common-docker version 7.6.9-r2 fixes 7 vulnerabilities: CVE-2026-24281, CVE-2026-24308, CVE-2024-29371, ghsa-7xrh-hqfc-g7qr, ghsa-crhr-qqj8-rpxc...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: wildfly, conductor, nuxeo, camunda, sonarqube, elasticsearch-fips, thingsboard, spdx-tools-java, s3proxy-fips, cassandra-fips, apache-polaris-fips, apache-nifi, confluent-kafka-jre-bcfips, spark-kubernetes-operator-fips, trino, zipkin, scala, nextflow, wazuh-indexer,...

CVE-2026-54515 vulnerabilities

Vulnerabilities for packages: gradle, thingsboard, infinispan, apache-nifi-registry, keycloak-config-cli, airflow, logstash, scala, spdx-tools-java, apache-pulsar, jenkins, ruby4.0-jrjackson, ruby3.3-jrjackson, wildfly, confluent-common-docker, jenkins-plugin-manager, cassandra-reaper,...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: gradle, thingsboard, infinispan, apache-nifi-registry, keycloak-config-cli, airflow, logstash, scala, spdx-tools-java, apache-pulsar, jenkins, ruby4.0-jrjackson, ruby3.3-jrjackson, wildfly, confluent-common-docker, jenkins-plugin-manager, cassandra-reaper,...

CLEANSTART-2026-RD06185 Security fixes for CVE-2024-29371, CVE-2026-1225, CVE-2026-24281, CVE-2026-24308, CVE-2026-42577, CVE-2026-42583, ghsa-25qh-j22f-pwp8, ghsa-3677-xxcr-wjqv, ghsa-72hv-8253-57qq, ghsa-7xrh-hqfc-g7qr, ghsa-crhr-qqj8-rpxc, ghsa-mj4r-2hfc-f8p6, ghsa-qqpg-mvqg-649v, ghsa-rwm7-x88c-3g2p applied in versions: 7.6.9-r2, 7.6.9-r3, 7.6.9-r4, 7.6.9-r5

Multiple security vulnerabilities affect the confluent-common-docker package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: gitsign, ctop, local-path-provisioner, sftpgo-plugin-pubsub, cloud-provider-aws, gostatsd, kube-vip, nats, addon-resizer, lvm-driver, checksec, blobfuse2, kuberay-operator, octo-sts, confluent-common-docker, newrelic-fluent-bit-output, grafana-operator,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: hivemind, checksec, custom-pod-autoscaler-operator, newrelic-fluent-bit-output, secrets-store-csi-driver-provider-aws-fips, git-lfs, sftpgo-plugin-geoipfilter, blob-csi-fips, vault-k8s, modelmesh-runtime-adapter, etcd-fips, terraform-provider-time,...

CVE-2025-52999 vulnerabilities

Vulnerabilities for packages: confluent-common-docker, cassandra-reaper, cassandra, scala, gradle-stage0, spark, tez, druid...

GHSA-H46C-H94J-95F3 vulnerabilities

Vulnerabilities for packages: confluent-common-docker, cassandra-reaper, cassandra, scala, gradle-stage0, spark, tez, druid...

GHSA-WXR5-93PH-8WR9 vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, strimzi-kafka-operator, wildfly, celeborn, apache-nifi, akhq, confluent-common-docker, jenkins-plugin-manager, cassandra-reaper, spdx-tools-java, apicurio-registry, trino, opensearch, tez, druid, sonarqube, jenkins...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: wildfly, tez, ghidra, celeborn, neo4j, hadoop-fips, sonarqube, camunda-zeebe, hadoop-client-modules, cassandra-reaper, solr, solr-fips, spdx-tools-java, jenkins, confluent-kafka-jre-bcfips, apache-nifi, druid, kafka, jenkins-plugin-manager, apache-activemq-artemis,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: nri-discovery-kubernetes, yace, thanos, vendir, osv-scanner, flux-kustomize-controller, scorecard, flux-source-controller, ytt, aws-flb-firehose, crossplane-provider-sql, vertical-pod-autoscaler, gops, aws-flb-cloudwatch, nri-f5, slsa-verifier, glow, ip-masq-agent,...