GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: scala, kafbat-ui, knative-kafka-broker, thingsboard, apache-tika, opensearch, flyway, localstack, s3proxy-fips, celeborn, elasticsearch, druid, kafka-bridge, keycloak-fips, kafka-bridge-fips, apache-hop-fips, apache-pulsar, spdx-tools-java, solr-fips,...

CVE-2026-54515 vulnerabilities

Vulnerabilities for packages: confluent-common-docker, scala, logstash, wildfly, management-api-for-apache-cassandra-5.0, apache-nifi-registry, neo4j, apache-pulsar, thingsboard, gradle, nextflow, trino, spdx-tools-java, zipkin, keycloak, solr, cassandra, kafka, kserve-modelmesh, dependency-track...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: confluent-common-docker, scala, logstash, wildfly, management-api-for-apache-cassandra-5.0, apache-nifi-registry, neo4j, apache-pulsar, thingsboard, gradle, nextflow, trino, spdx-tools-java, zipkin, keycloak, solr, cassandra, kafka, kserve-modelmesh, dependency-track...

CLEANSTART-2026-RD06185 Security fixes for CVE-2024-29371, CVE-2026-1225, CVE-2026-24281, CVE-2026-24308, CVE-2026-42577, CVE-2026-42583, ghsa-25qh-j22f-pwp8, ghsa-3677-xxcr-wjqv, ghsa-72hv-8253-57qq, ghsa-7xrh-hqfc-g7qr, ghsa-crhr-qqj8-rpxc, ghsa-mj4r-2hfc-f8p6, ghsa-qqpg-mvqg-649v, ghsa-rwm7-x88c-3g2p applied in versions: 7.6.9-r2, 7.6.9-r3, 7.6.9-r4, 7.6.9-r5

Multiple security vulnerabilities affect the confluent-common-docker package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: confluent-common-docker, ctop, blobfuse2, vexctl, mongodb-kubernetes-operator, lvm-driver, dagdotdev, kserve-rest-proxy, octo-sts, bank-vaults, vault-k8s, grafana-operator, git-lfs, kube-vip-cloud-provider, docker-credential-ecr-login, addon-resizer,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: kube-vip, secrets-store-csi-driver-provider-aws-fips, kube-logging-operator-custom-runner-fips, kube-vip-cloud-provider, dagdotdev, lvm-driver, wazero-fips, openbao-k8s-fips, mongodb-kubernetes-operator, vault-benchmark, confluent-common-docker, karma-fips,...

CVE-2025-52999 vulnerabilities

Vulnerabilities for packages: confluent-common-docker, gradle-stage0, spark, scala, celeborn, tez, cassandra, cassandra-reaper...

GHSA-H46C-H94J-95F3 vulnerabilities

Vulnerabilities for packages: confluent-common-docker, gradle-stage0, spark, scala, celeborn, tez, cassandra, cassandra-reaper...

GHSA-WXR5-93PH-8WR9 vulnerabilities

Vulnerabilities for packages: confluent-common-docker, druid, trino, akhq, jenkins, wildfly, jenkins-plugin-manager, spdx-tools-java, opensearch, apicurio-registry, sonarqube, celeborn, strimzi-kafka-operator, tez, apache-activemq-artemis, apache-nifi, cassandra-reaper, kafka...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: opensearch, celeborn, druid, confluent-kafka-jre-bcfips, spdx-tools-java, tez, jenkins-plugin-manager, jenkins, strimzi-kafka-operator, cassandra-reaper, camunda-zeebe, apache-nifi, confluent-common-docker, neo4j, ghidra, apicurio-registry, akhq,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: gobump, vexctl, kaf, gitness, vertical-pod-autoscaler, gcsfuse, dockerize, openfga, postgres-operator, k8ssandra-client, velero, mkcert, kube-metrics-adapter, cloudnative-pg, nats, nri-f5, kafka-proxy, gobuster, dask-gateway, protoc-gen-go-grpc, harbor-registry,...