GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, apache-hop-fips, zookeeper-fips, camunda-zeebe, guacamole-client, apache-nifi-registry, hono, seata, zipkin, jenkins, s3proxy, cassandra-reaper, wildfly, spdx-tools-java, druid, hadoop-client-modules, geoserver, thingsboard,...

CVE-2026-54515 vulnerabilities

Vulnerabilities for packages: jenkins-plugin-manager, confluent-kafka, ruby3.3-jrjackson, ruby4.0-jrjackson, zookeeper, gradle, cassandra-reaper, cassandra, trino, wavefront-proxy, opensearch, kafka, jenkins, scala, apache-pulsar, apache-tika, akhq, zipkin, thingsboard, ruby3.2-jrjackson,...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: jenkins-plugin-manager, confluent-kafka, ruby3.3-jrjackson, ruby4.0-jrjackson, zookeeper, gradle, cassandra-reaper, cassandra, trino, wavefront-proxy, opensearch, kafka, jenkins, scala, apache-pulsar, apache-tika, akhq, zipkin, thingsboard, ruby3.2-jrjackson,...

CLEANSTART-2026-RD06185 Security fixes for CVE-2024-29371, CVE-2026-1225, CVE-2026-24281, CVE-2026-24308, CVE-2026-42577, CVE-2026-42583, ghsa-25qh-j22f-pwp8, ghsa-3677-xxcr-wjqv, ghsa-72hv-8253-57qq, ghsa-7xrh-hqfc-g7qr, ghsa-crhr-qqj8-rpxc, ghsa-mj4r-2hfc-f8p6, ghsa-qqpg-mvqg-649v, ghsa-rwm7-x88c-3g2p applied in versions: 7.6.9-r2, 7.6.9-r3, 7.6.9-r4, 7.6.9-r5

Multiple security vulnerabilities affect the confluent-common-docker package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: php-fpmexporter, vault-benchmark, gostatsd, kube-vip, cloud-provider-aws, grafana-operator, octo-sts, mongodb-kubernetes-operator, vault-k8s, lvm-driver, container-object-storage-interface, pvc-autoresizer, git-lfs, linkerd2-proxy-init, nats, vexctl, ctop,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: shfmt, gitsign, k8sgpt-operator, cluster-api, stakater-reloader, memcached-exporter-fips, kserve-rest-proxy, node-problem-detector-fips, kubeflow-katib, local-path-provisioner, kube-vip-cloud-provider, blob-csi-fips, terraform-provider-tls-fips, bank-vaults,...

CVE-2025-52999 vulnerabilities

Vulnerabilities for packages: spark, scala, tez, confluent-common-docker, gradle-stage0, cassandra-reaper, cassandra...

GHSA-H46C-H94J-95F3 vulnerabilities

Vulnerabilities for packages: spark, scala, tez, confluent-common-docker, gradle-stage0, cassandra-reaper, cassandra...

GHSA-WXR5-93PH-8WR9 vulnerabilities

Vulnerabilities for packages: jenkins-plugin-manager, spdx-tools-java, strimzi-kafka-operator, opensearch, apache-nifi, jenkins, tez, celeborn, druid, sonarqube, confluent-common-docker, akhq, apache-activemq-artemis, wildfly, apicurio-registry, cassandra-reaper, trino...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: akhq, camunda-zeebe, celeborn, apache-activemq-artemis, sonarqube, opensearch, apache-nifi, jenkins, trino, cassandra-reaper, apicurio-registry, wildfly, spdx-tools-java, druid, jenkins-plugin-manager, hadoop-client-modules, confluent-common-docker, neo4j, ghidra,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, oras, prometheus-alertmanager, speedtest-go, fq, trust-manager, nats, vt-cli, vexctl, neuvector-sigstore-interface, crossplane-provider-aws, terraform-docs, ferretdb, flux-helm-controller, ytt, skopeo, protoc-gen-go-grpc, neuvector-dbgen,...