41 matches found
CVE-2026-15911
A flaw was found in confluent-kafka. The HashiCorp Vault Key Management Service KMS integration fails to properly validate Transport Layer Security TLS certificates by default. A remote attacker able to intercept network traffic could exploit this flaw to intercept and decrypt sensitive data or...
CVE-2026-15911
Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...
EUVD-2026-91008
Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...
CVE-2026-15911
The Confluent Kafka Python client contains a vulnerability in its HashiCorp Vault KMS integration due to a failure to properly validate Transport Layer Security (TLS) certificates by default. A remote attacker capable of intercepting network traffic could exploit this flaw to intercept and decryp...
GHSA-GX83-3VF8-GH7J vulnerabilities
Vulnerabilities for packages: flyway, apache-hop, camunda, nextflow, kafka, request-9047-keycloak-fips, ruby3.3-jrjackson, apache-activemq, floci-az, reposilite, spdx-tools-java, kafka-bridge, datahub-gms, ruby3.2-jrjackson, spark, management-api-for-apache-cassandra-4.0, conductor,...
CVE-2026-68497 vulnerabilities
Vulnerabilities for packages: flyway, apache-hop, camunda, nextflow, kafka, request-9047-keycloak-fips, ruby3.3-jrjackson, apache-activemq, floci-az, reposilite, spdx-tools-java, kafka-bridge, datahub-gms, ruby3.2-jrjackson, spark, management-api-for-apache-cassandra-4.0, conductor,...
GHSA-Q4XH-88C3-WMH7 vulnerabilities
Vulnerabilities for packages: flyway, apache-hop, camunda, nextflow, kafka, request-9047-keycloak-fips, ruby3.3-jrjackson, apache-activemq, floci-az, reposilite, spdx-tools-java, kafka-bridge, datahub-gms, ruby3.2-jrjackson, spark, management-api-for-apache-cassandra-4.0, conductor,...
GHSA-WJGM-6HV5-3CVF vulnerabilities
Vulnerabilities for packages: flyway, apache-hop, camunda, nextflow, kafka, request-9047-keycloak-fips, ruby3.3-jrjackson, apache-activemq, floci-az, reposilite, spdx-tools-java, kafka-bridge, datahub-gms, ruby3.2-jrjackson, spark, management-api-for-apache-cassandra-4.0, conductor,...
CVE-2026-19032 vulnerabilities
Vulnerabilities for packages: flyway, apache-hop, camunda, nextflow, kafka, request-9047-keycloak-fips, ruby3.3-jrjackson, apache-activemq, floci-az, reposilite, spdx-tools-java, kafka-bridge, datahub-gms, ruby3.2-jrjackson, spark, management-api-for-apache-cassandra-4.0, conductor,...
CVE-2026-57836-Confluent_Kafka
CVE-2026-57836: confluent-kafka における HashiCorp Vault KMS の TLS 証明書検証の無効化 深刻度: High、CVSS 3.1 7.4 ベクター v3.1: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 影響を受けるバージョン: confluent-kafka = 2.8.0, = 2.14.2 修正バージョン: 2.15.0 CWE: CWE-295 不適切な証明書検証 コンポーネント:...
CVE-2026-86792: Use of Externally-Controlled Input to Select Classes or Code
Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found in a Kafka connection's extra field into Python callables via importstring, with no allowlist, and hand them to the confluent-kafka client which invokes them. Deployments that have enabled the Kafk...
CVE-2026-83557 vulnerabilities
Vulnerabilities for packages: flyway, apache-hop, camunda, nextflow, kafka, request-9047-keycloak-fips, ruby3.3-jrjackson, apache-activemq, floci-az, reposilite, spdx-tools-java, kafka-bridge, datahub-gms, ruby3.2-jrjackson, spark, management-api-for-apache-cassandra-4.0, conductor,...
CLEANSTART-2026-KQ29054 Security fixes in confluent-kafka 8.3.0-r1
Package confluent-kafka version 8.3.0-r1 fixes 14 vulnerabilities: CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54516, CVE-2026-54517...
CLEANSTART-2026-NG34780 Security fixes in confluent-kafka 8.2.0-r1
Package confluent-kafka version 8.2.0-r1 fixes 3 vulnerabilities: ghsa-72hv-8253-57qq, ghsa-6fmv-xxpf-w3cw, CVE-2025-67030...
CLEANSTART-2026-AU09596 Security fixes in confluent-kafka 8.2.0-r0
Package confluent-kafka version 8.2.0-r0 fixes 7 vulnerabilities: CVE-2026-34477, CVE-2026-34478, CVE-2026-34479, CVE-2026-34480, CVE-2026-2332...
CVE-2026-10050 vulnerabilities
Vulnerabilities for packages: confluent-kafka, akhq, apache-tika, trino, druid, dependency-track, solr, tez, cloudwatch-exporter, neo4j...
CVE-2026-6790 vulnerabilities
Vulnerabilities for packages: confluent-kafka, akhq, apache-tika, druid, dependency-track, solr, cloudwatch-exporter, strimzi-kafka-operator, neo4j...
GHSA-7P3P-8QV8-M2VH vulnerabilities
Vulnerabilities for packages: confluent-kafka, akhq, apache-tika, druid, dependency-track, solr, cloudwatch-exporter, strimzi-kafka-operator, neo4j...