CLEANSTART-2026-RD06185 Security fixes for CVE-2024-29371, CVE-2026-1225, CVE-2026-24281, CVE-2026-24308, CVE-2026-42577, CVE-2026-42583, ghsa-25qh-j22f-pwp8, ghsa-3677-xxcr-wjqv, ghsa-72hv-8253-57qq, ghsa-7xrh-hqfc-g7qr, ghsa-crhr-qqj8-rpxc, ghsa-mj4r-2hfc-f8p6, ghsa-qqpg-mvqg-649v, ghsa-rwm7-x88c-3g2p applied in versions: 7.6.9-r2, 7.6.9-r3, 7.6.9-r4, 7.6.9-r5

Multiple security vulnerabilities affect the confluent-common-docker package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: shfmt, local-path-provisioner, lvm-driver, mongodb-kubernetes-operator, git-lfs, confluent-common-docker, hivemind, bank-vaults, newrelic-fluent-bit-output, terraform-provider-time, octo-sts, addon-resizer, cloud-provider-aws, docker-credential-ecr-login, blobfuse2,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: gitlab-runner, terraform-provider-sendgrid-fips, azurefile-csi-fips, vexctl, git-lfs, prometheus-beat-exporter-fips, pvc-autoresizer, custom-pod-autoscaler-operator, karma-fips, newrelic-nri-statsd, apm-server-fips, checksec, terraform-provider-time, wazero-fips,...

CVE-2025-52999 vulnerabilities

Vulnerabilities for packages: tez, cassandra-reaper, confluent-common-docker, cassandra, gradle-stage0, celeborn, scala...

GHSA-H46C-H94J-95F3 vulnerabilities

Vulnerabilities for packages: tez, cassandra-reaper, confluent-common-docker, cassandra, gradle-stage0, celeborn, scala...

GHSA-WXR5-93PH-8WR9 vulnerabilities

Vulnerabilities for packages: apache-nifi, jenkins-plugin-manager, kafka, apicurio-registry, tez, apache-activemq-artemis, opensearch, cassandra-reaper, confluent-common-docker, strimzi-kafka-operator, trino, akhq, wildfly, sonarqube, celeborn, spdx-tools-java, jenkins...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: spdx-tools-java, akhq, apache-nifi, camunda-zeebe, opensearch, hadoop-client-modules, apicurio-registry, celeborn, jenkins-plugin-manager, trino, kafka, ghidra, confluent-kafka-jre-bcfips, neo4j, sonarqube, wildfly, tez, cassandra-reaper, strimzi-kafka-operator,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: nuclei, git-credential-oauth, age, newrelic-fluent-bit-output, docker-credential-ecr-login, prometheus-adapter, sftpgo-plugin-pubsub, nodetaint, neuvector-dbgen, spire-controller-manager, k8ssandra-client, k6, harbor-cli, overmind, wireguard-go, thanos-operator,...