CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: bank-vaults, addon-resizer, terraform-provider-time, ctop, cloud-provider-aws, docker-credential-ecr-login, hivemind, local-path-provisioner, vault-k8s, vexctl, git-lfs, container-object-storage-interface, sftpgo-plugin-geoipfilter, sftpgo-plugin-pubsub, lvm-driver,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: rancher-machine, checksec, kserve-rest-proxy, gostatsd, php-fpmexporter, karpenter-fips, git-lfs, cluster-api, knative-eventing, terraform-provider-sendgrid-fips, prometheus-bind-exporter, kubernetes-csi-node-driver-registrar-fips, blobfuse2, azuredisk-csi-fips,...

Malicious code in confluent-examples-nodejs (npm)

The package confluent-examples-nodejs was found to contain malicious code...

MAL-2025-17485 Malicious code in confluent-examples-nodejs (npm)

The package confluent-examples-nodejs was found to contain malicious code...

CVE-2025-52999 vulnerabilities

Vulnerabilities for packages: scala, spark, tez, gradle-stage0, cassandra-reaper, druid, confluent-common-docker, cassandra...

GHSA-H46C-H94J-95F3 vulnerabilities

Vulnerabilities for packages: scala, spark, tez, gradle-stage0, cassandra-reaper, druid, confluent-common-docker, cassandra...

GHSA-WXR5-93PH-8WR9 vulnerabilities

Vulnerabilities for packages: akhq, apache-nifi, strimzi-kafka-operator, trino, sonarqube, tez, apicurio-registry, cassandra-reaper, apache-activemq-artemis, celeborn, confluent-common-docker, druid, jenkins-plugin-manager, spdx-tools-java, opensearch, jenkins, wildfly...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: opensearch, spdx-tools-java, jenkins, jenkins-plugin-manager, hadoop-client-modules, sonarqube, apicurio-registry, tez, cassandra-reaper, apache-nifi, wildfly, confluent-kafka-jre-bcfips, druid, apache-activemq-artemis, camunda-zeebe, kafka, strimzi-kafka-operator,...

MAL-2025-4148 Malicious code in @confluent-cfet-medusa/dataset-designer (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @confluent-cfet-medusa/dataset-designer (npm)

--- -= Per source details. Do not edit below this line.=-...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: pluto, spiffe-helper, cortex, k6, tflint, velero-plugin-for-microsoft-azure, gke-gcloud-auth-plugin, shfmt, terraform-docs, petname, containerd, kubernetes-dashboard-auth, sftpgo-plugin-kms, nri-nginx, cni-plugins, flux-image-automation-controller, nats, helm, ytt,...

GHSA-QH8G-58PP-2WXH vulnerabilities

Vulnerabilities for packages: pinot, cruise-control, wso2is, clojure-tools, confluent-kafka, apache-pulsar, hadoop-client-modules, clojure, cloudwatch-exporter, zookeeper, apache-tika, zookeeper-fips, apache-pulsar-fips, cassandra-reaper, apache-nifi, confluent-kafka-jre-bcfips, apache-tika-fips,...

GHSA-G8M5-722R-8WHQ vulnerabilities

Vulnerabilities for packages: druid, kafka, cloudwatch-exporter, zookeeper, solr, strimzi-kafka-operator, spark-fips, apache-tika, spark, zookeeper-fips, cassandra-reaper, celeborn, apache-nifi, confluent-kafka-jre-bcfips, confluent-kafka...

CVE-2024-8184 vulnerabilities

Vulnerabilities for packages: druid, kafka, cloudwatch-exporter, zookeeper, solr, strimzi-kafka-operator, spark-fips, apache-tika, spark, zookeeper-fips, cassandra-reaper, celeborn, apache-nifi, confluent-kafka-jre-bcfips, confluent-kafka...

CVE-2024-6763 vulnerabilities

Vulnerabilities for packages: pinot, cruise-control, wso2is, clojure-tools, confluent-kafka, apache-pulsar, hadoop-client-modules, clojure, cloudwatch-exporter, zookeeper, apache-tika, zookeeper-fips, apache-pulsar-fips, cassandra-reaper, apache-nifi, confluent-kafka-jre-bcfips, apache-tika-fips,...

CVE-2024-47554 vulnerabilities

Vulnerabilities for packages: opensearch, sonarqube-10, confluent-kafka, hadoop-client-modules, sonarqube, zookeeper, kserve-modelmesh, zookeeper-fips, apache-nifi, wildfly, confluent-kafka-jre-bcfips, hadoop-fips, druid, logstash, kserve, management-api-for-apache-cassandra-4.1, kafka,...

GHSA-735F-PC8J-V9W8 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, apache-nifi, trino, wavefront-proxy, kserve-modelmesh, tez, celeborn, druid, confluent-kafka, thingsboard, sonarqube-10, opensearch...

CVE-2024-7254 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, apache-nifi, trino, wavefront-proxy, kserve-modelmesh, tez, celeborn, druid, confluent-kafka, thingsboard, sonarqube-10, opensearch...

Malicious code in confluent-docker-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bc7d66b033c3d09c07ce3226cd534199a9f8cb2200a79035526192fb140b94d9 The package is designed to exfiltrate basic data, like hostname and OS details, as well as collect information about the stacktrace it's imported from. ---...

MAL-2024-9963 Malicious code in confluent-docker-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bc7d66b033c3d09c07ce3226cd534199a9f8cb2200a79035526192fb140b94d9 The package is designed to exfiltrate basic data, like hostname and OS details, as well as collect information about the stacktrace it's imported from. ---...