18 matches found
CVE-2026-56741 vulnerabilities
Vulnerabilities for packages: apache-camel-karavan-devmode, tez, confluent-kafka, spark, spark-kubernetes-operator, apache-pulsar, spark-kubernetes-operator-fips, kafka-fips, apache-hop, hadoop-client-modules, spark-fips, kafka, pinot-fips, zookeeper, apache-nifi, apache-pulsar-fips,...
CVE-2026-56740 vulnerabilities
Vulnerabilities for packages: apache-camel-karavan-devmode, tez, confluent-kafka, spark, spark-kubernetes-operator, apache-pulsar, spark-kubernetes-operator-fips, kafka-fips, apache-hop, hadoop-client-modules, spark-fips, kafka, pinot-fips, zookeeper, apache-nifi, apache-pulsar-fips,...
CVE-2026-56741 vulnerabilities
Vulnerabilities for packages: kafka, zookeeper, confluent-kafka, druid, apache-pulsar, tez, apache-nifi...
CVE-2026-56740 vulnerabilities
Vulnerabilities for packages: kafka, zookeeper, confluent-kafka, druid, apache-pulsar, tez, apache-nifi...
Malicious code in confluent-kafka-javascript (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20f9433c5da4c3ee143c33ec2a876e07ff01aa1188d0efa783858bcd0903d3c Analysis of this package version produced no static indicator and no traced behavioral findings. The tarball does not exhibit lifecycle-script...
MAL-2026-6682 Malicious code in confluent-kafka-javascript (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20f9433c5da4c3ee143c33ec2a876e07ff01aa1188d0efa783858bcd0903d3c Analysis of this package version produced no static indicator and no traced behavioral findings. The tarball does not exhibit lifecycle-script...
CLEANSTART-2026-PV53006 Security fixes for CVE-2025-67030, CVE-2026-33811, CVE-2026-33814, CVE-2026-34479, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-6fmv-xxpf-w3cw, ghsa-72hv-8253-57qq applied in versions: 8.2.0-r0, 8.2.0-r1, 8.2.0-r2
Multiple security vulnerabilities affect the confluent-kafka package. These issues are resolved in later releases. See references for individual vulnerability details...
Malicious Package
Overview confluent-kafka is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-202372
Malicious code in confluent-kafka npm...
Malicious code in confluent-kafka (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f8f3691acc10147a767bd08facab31e59a8acfb8d38c89df1400e263cc6f8f The package confluent-kafka was found to contain malicious code. Source: ghsa-malware 135e8cf2cd5582b8ed8562c5f5ccfd1cf7265319ad340463b750b75e341858e...
MAL-2025-192405 Malicious code in confluent-kafka (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f8f3691acc10147a767bd08facab31e59a8acfb8d38c89df1400e263cc6f8f The package confluent-kafka was found to contain malicious code. Source: ghsa-malware 135e8cf2cd5582b8ed8562c5f5ccfd1cf7265319ad340463b750b75e341858e...
GHSA-QH8G-58PP-2WXH vulnerabilities
Vulnerabilities for packages: confluent-kafka, spark, solr, neo4j, cloudwatch-exporter, akhq, cassandra-reaper, spark-kubernetes-operator, apache-pulsar, spark-kubernetes-operator-fips, celeborn, wso2is, hadoop-client-modules, spark-fips, clojure, zaproxy, pinot-fips, zookeeper, apache-nifi,...
GHSA-G8M5-722R-8WHQ vulnerabilities
Vulnerabilities for packages: spark-fips, confluent-kafka, celeborn, kafka, spark, apache-tika, solr, zookeeper, strimzi-kafka-operator, cloudwatch-exporter, apache-nifi, zookeeper-fips, cassandra-reaper, confluent-kafka-jre-bcfips, druid...
CVE-2024-6763 vulnerabilities
Vulnerabilities for packages: confluent-kafka, spark, solr, neo4j, cloudwatch-exporter, akhq, cassandra-reaper, spark-kubernetes-operator, apache-pulsar, spark-kubernetes-operator-fips, celeborn, wso2is, hadoop-client-modules, spark-fips, clojure, zaproxy, pinot-fips, zookeeper, apache-nifi,...
CVE-2024-8184 vulnerabilities
Vulnerabilities for packages: spark-fips, confluent-kafka, celeborn, kafka, spark, apache-tika, solr, zookeeper, strimzi-kafka-operator, cloudwatch-exporter, apache-nifi, zookeeper-fips, cassandra-reaper, confluent-kafka-jre-bcfips, druid...
CVE-2024-47554 vulnerabilities
Vulnerabilities for packages: confluent-kafka, sonarqube, sonarqube-10, logstash, celeborn, kserve, kserve-modelmesh, hadoop-client-modules, confluent-common-docker, kafka, management-api-for-apache-cassandra-4.1, zookeeper, apache-nifi, opensearch, confluent-kafka-jre-bcfips,...