CLEANSTART-2026-GX16359 Security fixes in confluent-common-docker 7.6.9-r3

Package confluent-common-docker version 7.6.9-r3 fixes 4 vulnerabilities: CVE-2025-11226, CVE-2026-1225, ghsa-25qh-j22f-pwp8, ghsa-qqpg-mvqg-649v...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: ontop-fips, neo4j, localstack, apache-pulsar, spark-kubernetes-operator-fips, request-9047-keycloak-fips, apicurio-registry, apache-tika-fips, apicurio-registry-fips, ruby3.3-jrjackson, ontop, nuxeo, flyway, akhq, sonarqube, knative-kafka-broker,...

CVE-2026-54515 vulnerabilities

Vulnerabilities for packages: opensearch, wildfly, akhq, apicurio-registry, logstash, nextflow, ruby3.4-jrjackson, trino, ruby3.2-jrjackson, neo4j, infinispan, airflow, jenkins-plugin-manager, ruby4.0-jrjackson, cassandra-reaper, apache-nifi-registry, gradle, solr, strimzi-kafka-operator,...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: opensearch, wildfly, akhq, apicurio-registry, logstash, nextflow, ruby3.4-jrjackson, trino, ruby3.2-jrjackson, neo4j, infinispan, airflow, jenkins-plugin-manager, ruby4.0-jrjackson, cassandra-reaper, apache-nifi-registry, gradle, solr, strimzi-kafka-operator,...

CLEANSTART-2026-RD06185 Security fixes for CVE-2024-29371, CVE-2026-1225, CVE-2026-24281, CVE-2026-24308, CVE-2026-42577, CVE-2026-42583, ghsa-25qh-j22f-pwp8, ghsa-3677-xxcr-wjqv, ghsa-72hv-8253-57qq, ghsa-7xrh-hqfc-g7qr, ghsa-crhr-qqj8-rpxc, ghsa-mj4r-2hfc-f8p6, ghsa-qqpg-mvqg-649v, ghsa-rwm7-x88c-3g2p applied in versions: 7.6.9-r2, 7.6.9-r3, 7.6.9-r4, 7.6.9-r5

Multiple security vulnerabilities affect the confluent-common-docker package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: addon-resizer, pvc-autoresizer, rancher-machine, secrets-store-csi-driver-provider-aws, local-path-provisioner, kuberay-operator, git-lfs, vexctl, dagdotdev, custom-pod-autoscaler-operator, gostatsd, mongodb-kubernetes-operator, sftpgo-plugin-pubsub, checksec,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: grafana-operator, hivemind, vexctl, docker-credential-ecr-login, terraform-provider-time, karma-fips, etcd-fips, prometheus-nats-exporter, azuredisk-csi-fips, terraform-provider-sendgrid-fips, kubernetes-dashboard-fips, wazero-fips, gitsign,...

CVE-2025-52999 vulnerabilities

Vulnerabilities for packages: gradle-stage0, confluent-common-docker, scala, cassandra-reaper, druid, cassandra, tez, spark...

GHSA-H46C-H94J-95F3 vulnerabilities

Vulnerabilities for packages: gradle-stage0, confluent-common-docker, scala, cassandra-reaper, druid, cassandra, tez, spark...

GHSA-WXR5-93PH-8WR9 vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, opensearch, wildfly, akhq, apicurio-registry, confluent-common-docker, jenkins-plugin-manager, strimzi-kafka-operator, cassandra-reaper, trino, druid, tez, celeborn, apache-nifi, jenkins, sonarqube, spdx-tools-java...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, ghidra, apache-nifi, opensearch, neo4j, spdx-tools-java, apicurio-registry, jenkins-plugin-manager, tez, wildfly, celeborn, akhq, sonarqube, confluent-kafka-jre-bcfips, druid, camunda-zeebe, confluent-common-docker, apache-activemq-artemis,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: restic, nri-prometheus, k8s-device-plugin, chartmuseum, grafana-operator, kube-vip, scorecard, crossplane-provider-sql, cloudnative-pg, prometheus-pushgateway, nuclei, docker-compose, vault-benchmark, gobuster, conftest, xcaddy, overmind, crossplane-provider-aws,...