CLEANSTART-2026-AT07752 Security fix for CVE-2024-29371 applied in: apache-nifi 2.6.0-r3, apache-nifi 2.7.2-r7, confluent-common-docker 7.6.9-r2, strimzi-kafka-operator 0.47.0-r2

CVE-2024-29371 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KF39510 Security fixes in confluent-common-docker 7.6.9-r5

Package confluent-common-docker version 7.6.9-r5 fixes 2 vulnerabilities: ghsa-rwm7-x88c-3g2p, CVE-2026-42577...

CLEANSTART-2026-OL08873 Security fixes in confluent-common-docker 7.6.9-r2

Package confluent-common-docker version 7.6.9-r2 fixes 7 vulnerabilities: CVE-2026-24281, CVE-2026-24308, CVE-2024-29371, ghsa-7xrh-hqfc-g7qr, ghsa-crhr-qqj8-rpxc...

CLEANSTART-2026-GX16359 Security fixes in confluent-common-docker 7.6.9-r3

Package confluent-common-docker version 7.6.9-r3 fixes 4 vulnerabilities: CVE-2025-11226, CVE-2026-1225, ghsa-25qh-j22f-pwp8, ghsa-qqpg-mvqg-649v...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, spark-kubernetes-operator, strimzi-kafka-operator-fips, neo4j, s3proxy-fips, apache-pulsar, confluent-common-docker, thingsboard, commercial-elasticsearch, elasticsearch-fips, cassandra, hadoop-fips, apache-hop, tez, wavefront-proxy,...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: ruby3.4-jrjackson, nextflow, confluent-kafka, apicurio-registry, kafka, tez, apache-tika, dependency-track, apache-pulsar, druid, gradle, celeborn, ruby3.3-jrjackson, neo4j, spark, cassandra, strimzi-kafka-operator, confluent-common-docker, flyway, trino, apache-nifi...

CVE-2026-54515 vulnerabilities

Vulnerabilities for packages: ruby3.4-jrjackson, nextflow, confluent-kafka, apicurio-registry, kafka, tez, apache-tika, dependency-track, apache-pulsar, druid, gradle, celeborn, ruby3.3-jrjackson, neo4j, spark, cassandra, strimzi-kafka-operator, confluent-common-docker, flyway, trino, apache-nifi...

CLEANSTART-2026-RD06185 Security fixes for CVE-2024-29371, CVE-2026-1225, CVE-2026-24281, CVE-2026-24308, CVE-2026-42577, CVE-2026-42583, ghsa-25qh-j22f-pwp8, ghsa-3677-xxcr-wjqv, ghsa-72hv-8253-57qq, ghsa-7xrh-hqfc-g7qr, ghsa-crhr-qqj8-rpxc, ghsa-mj4r-2hfc-f8p6, ghsa-qqpg-mvqg-649v, ghsa-rwm7-x88c-3g2p applied in versions: 7.6.9-r2, 7.6.9-r3, 7.6.9-r4, 7.6.9-r5

Multiple security vulnerabilities affect the confluent-common-docker package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: hivemind, addon-resizer, dagdotdev, mongodb-kubernetes-operator, kube-vip, vault-k8s, secrets-store-csi-driver-provider-aws, sftpgo-plugin-geoipfilter, vault-benchmark, gitsign, confluent-common-docker, vexctl, container-object-storage-interface, grafana-operator,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: kube-vip, kubeflow-katib, php-fpmexporter, openbao-k8s-fips, prometheus-node-exporter-fips, mattmoor-chainit, pvc-autoresizer, newrelic-fluent-bit-output, secrets-store-csi-driver-provider-aws-fips, knative-eventing, nvidia-nsight-compute-12.9, addon-resizer,...

CVE-2025-52999 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, cassandra, spark, confluent-common-docker, tez, gradle-stage0, druid, scala...

GHSA-H46C-H94J-95F3 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, cassandra, spark, confluent-common-docker, tez, gradle-stage0, druid, scala...

GHSA-WXR5-93PH-8WR9 vulnerabilities

Vulnerabilities for packages: spdx-tools-java, cassandra-reaper, apicurio-registry, confluent-common-docker, strimzi-kafka-operator, tez, trino, apache-nifi, jenkins-plugin-manager, apache-activemq-artemis, druid, sonarqube, opensearch, wildfly, celeborn, akhq, jenkins...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: apicurio-registry, celeborn, solr, trino, kafka, cassandra-reaper, neo4j, jenkins-plugin-manager, confluent-common-docker, camunda-zeebe, jenkins, hadoop-fips, confluent-kafka-jre-bcfips, solr-fips, tez, strimzi-kafka-operator, akhq, ghidra, hadoop-client-modules,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: oras, temporal-server, thanos, crossplane-provider-azure, yunikorn-web, kubernetes-csi-external-attacher, descheduler, podman, scorecard, grpcurl, openfga, pdfcpu, crossplane-provider-sql, trillian, crane, tfsec, govulncheck, falco-exporter, fq, gostatsd, kubecolor,...