CLEANSTART-2026-KQ29054 Security fixes in confluent-kafka 8.3.0-r1

Package confluent-kafka version 8.3.0-r1 fixes 14 vulnerabilities: CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54516, CVE-2026-54517...

CLEANSTART-2026-NG34780 Security fixes in confluent-kafka 8.2.0-r1

Package confluent-kafka version 8.2.0-r1 fixes 3 vulnerabilities: ghsa-72hv-8253-57qq, ghsa-6fmv-xxpf-w3cw, CVE-2025-67030...

CLEANSTART-2026-AU09596 Security fixes in confluent-kafka 8.2.0-r0

Package confluent-kafka version 8.2.0-r0 fixes 7 vulnerabilities: CVE-2026-34477, CVE-2026-34478, CVE-2026-34479, CVE-2026-34480, CVE-2026-2332...

CVE-2026-10050 vulnerabilities

Vulnerabilities for packages: dependency-track, confluent-kafka, druid, solr, apache-tika, neo4j, akhq, tez...

CVE-2026-10051 vulnerabilities

Vulnerabilities for packages: dependency-track, confluent-kafka, druid, solr, neo4j, akhq, strimzi-kafka-operator...

GHSA-7P3P-8QV8-M2VH vulnerabilities

Vulnerabilities for packages: dependency-track, confluent-kafka, druid, solr, neo4j, akhq...

CVE-2026-6790 vulnerabilities

Vulnerabilities for packages: dependency-track, confluent-kafka, druid, solr, neo4j, akhq...

GHSA-W7X5-G22V-XQHR vulnerabilities

Vulnerabilities for packages: dependency-track, confluent-kafka, druid, solr, neo4j, trino, akhq, strimzi-kafka-operator...

GHSA-F4V5-65JJ-PCR2 vulnerabilities

Vulnerabilities for packages: dependency-track, confluent-kafka, druid, solr, neo4j, akhq, strimzi-kafka-operator...

CVE-2026-8384 vulnerabilities

Vulnerabilities for packages: dependency-track, confluent-kafka, druid, solr, neo4j, trino, akhq, strimzi-kafka-operator...

GHSA-2FVJ-HGJ9-J2GR vulnerabilities

Vulnerabilities for packages: dependency-track, confluent-kafka, druid, solr, apache-tika, neo4j, akhq, tez...

CVE-2026-56741 vulnerabilities

Vulnerabilities for packages: spark, pinot, confluent-kafka-jre-bcfips, druid, spark-kubernetes-operator, hadoop-fips, confluent-kafka, zookeeper, apache-hop-fips, apache-nifi, kafka-fips, spark-fips, apache-camel-karavan-devmode, pinot-fips, apache-hop, apache-pulsar, kafka, apache-pulsar-fips,...

CVE-2026-56740 vulnerabilities

Vulnerabilities for packages: spark, pinot, confluent-kafka-jre-bcfips, druid, spark-kubernetes-operator, hadoop-fips, confluent-kafka, zookeeper, apache-hop-fips, apache-nifi, kafka-fips, spark-fips, apache-camel-karavan-devmode, pinot-fips, apache-hop, apache-pulsar, kafka, apache-pulsar-fips,...

CVE-2026-56740 vulnerabilities

Vulnerabilities for packages: apache-pulsar, apache-nifi, confluent-kafka, druid, zookeeper, tez, kafka...

CVE-2026-56741 vulnerabilities

Vulnerabilities for packages: apache-pulsar, apache-nifi, confluent-kafka, druid, zookeeper, tez, kafka...

Malicious code in confluent-kafka-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20f9433c5da4c3ee143c33ec2a876e07ff01aa1188d0efa783858bcd0903d3c Analysis of this package version produced no static indicator and no traced behavioral findings. The tarball does not exhibit lifecycle-script...

MAL-2026-6682 Malicious code in confluent-kafka-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20f9433c5da4c3ee143c33ec2a876e07ff01aa1188d0efa783858bcd0903d3c Analysis of this package version produced no static indicator and no traced behavioral findings. The tarball does not exhibit lifecycle-script...

CLEANSTART-2026-PV53006 Security fixes for CVE-2025-67030, CVE-2026-33811, CVE-2026-33814, CVE-2026-34479, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-6fmv-xxpf-w3cw, ghsa-72hv-8253-57qq applied in versions: 8.2.0-r0, 8.2.0-r1, 8.2.0-r2

Multiple security vulnerabilities affect the confluent-kafka package. These issues are resolved in later releases. See references for individual vulnerability details...

EUVD-2025-202372

Malicious code in confluent-kafka npm...

Malicious code in confluent-kafka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f8f3691acc10147a767bd08facab31e59a8acfb8d38c89df1400e263cc6f8f The package confluent-kafka was found to contain malicious code. Source: ghsa-malware 135e8cf2cd5582b8ed8562c5f5ccfd1cf7265319ad340463b750b75e341858e...