80 matches found
CVE-2025-47906 vulnerabilities
Vulnerabilities for packages: bank-vaults, addon-resizer, terraform-provider-time, ctop, cloud-provider-aws, docker-credential-ecr-login, hivemind, local-path-provisioner, vault-k8s, vexctl, git-lfs, container-object-storage-interface, sftpgo-plugin-geoipfilter, sftpgo-plugin-pubsub, lvm-driver,...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: rancher-machine, checksec, kserve-rest-proxy, gostatsd, php-fpmexporter, karpenter-fips, git-lfs, cluster-api, knative-eventing, terraform-provider-sendgrid-fips, prometheus-bind-exporter, kubernetes-csi-node-driver-registrar-fips, blobfuse2, azuredisk-csi-fips,...
Malicious code in confluent-examples-nodejs (npm)
The package confluent-examples-nodejs was found to contain malicious code...
MAL-2025-17485 Malicious code in confluent-examples-nodejs (npm)
The package confluent-examples-nodejs was found to contain malicious code...
CVE-2025-52999 vulnerabilities
Vulnerabilities for packages: scala, spark, tez, gradle-stage0, cassandra-reaper, druid, confluent-common-docker, cassandra...
GHSA-H46C-H94J-95F3 vulnerabilities
Vulnerabilities for packages: scala, spark, tez, gradle-stage0, cassandra-reaper, druid, confluent-common-docker, cassandra...
GHSA-WXR5-93PH-8WR9 vulnerabilities
Vulnerabilities for packages: akhq, apache-nifi, strimzi-kafka-operator, trino, sonarqube, tez, apicurio-registry, cassandra-reaper, apache-activemq-artemis, celeborn, confluent-common-docker, druid, jenkins-plugin-manager, spdx-tools-java, opensearch, jenkins, wildfly...
CVE-2025-48734 vulnerabilities
Vulnerabilities for packages: opensearch, spdx-tools-java, jenkins, jenkins-plugin-manager, hadoop-client-modules, sonarqube, apicurio-registry, tez, cassandra-reaper, apache-nifi, wildfly, confluent-kafka-jre-bcfips, druid, apache-activemq-artemis, camunda-zeebe, kafka, strimzi-kafka-operator,...
MAL-2025-4148 Malicious code in @confluent-cfet-medusa/dataset-designer (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @confluent-cfet-medusa/dataset-designer (npm)
--- -= Per source details. Do not edit below this line.=-...
GHSA-7WRW-R4P8-38RX vulnerabilities
Vulnerabilities for packages: pluto, spiffe-helper, cortex, k6, tflint, velero-plugin-for-microsoft-azure, gke-gcloud-auth-plugin, shfmt, terraform-docs, petname, containerd, kubernetes-dashboard-auth, sftpgo-plugin-kms, nri-nginx, cni-plugins, flux-image-automation-controller, nats, helm, ytt,...
GHSA-QH8G-58PP-2WXH vulnerabilities
Vulnerabilities for packages: pinot, cruise-control, wso2is, clojure-tools, confluent-kafka, apache-pulsar, hadoop-client-modules, clojure, cloudwatch-exporter, zookeeper, apache-tika, zookeeper-fips, apache-pulsar-fips, cassandra-reaper, apache-nifi, confluent-kafka-jre-bcfips, apache-tika-fips,...
GHSA-G8M5-722R-8WHQ vulnerabilities
Vulnerabilities for packages: druid, kafka, cloudwatch-exporter, zookeeper, solr, strimzi-kafka-operator, spark-fips, apache-tika, spark, zookeeper-fips, cassandra-reaper, celeborn, apache-nifi, confluent-kafka-jre-bcfips, confluent-kafka...
CVE-2024-8184 vulnerabilities
Vulnerabilities for packages: druid, kafka, cloudwatch-exporter, zookeeper, solr, strimzi-kafka-operator, spark-fips, apache-tika, spark, zookeeper-fips, cassandra-reaper, celeborn, apache-nifi, confluent-kafka-jre-bcfips, confluent-kafka...
CVE-2024-6763 vulnerabilities
Vulnerabilities for packages: pinot, cruise-control, wso2is, clojure-tools, confluent-kafka, apache-pulsar, hadoop-client-modules, clojure, cloudwatch-exporter, zookeeper, apache-tika, zookeeper-fips, apache-pulsar-fips, cassandra-reaper, apache-nifi, confluent-kafka-jre-bcfips, apache-tika-fips,...
CVE-2024-47554 vulnerabilities
Vulnerabilities for packages: opensearch, sonarqube-10, confluent-kafka, hadoop-client-modules, sonarqube, zookeeper, kserve-modelmesh, zookeeper-fips, apache-nifi, wildfly, confluent-kafka-jre-bcfips, hadoop-fips, druid, logstash, kserve, management-api-for-apache-cassandra-4.1, kafka,...
GHSA-735F-PC8J-V9W8 vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, apache-nifi, trino, wavefront-proxy, kserve-modelmesh, tez, celeborn, druid, confluent-kafka, thingsboard, sonarqube-10, opensearch...
CVE-2024-7254 vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, apache-nifi, trino, wavefront-proxy, kserve-modelmesh, tez, celeborn, druid, confluent-kafka, thingsboard, sonarqube-10, opensearch...
Malicious code in confluent-docker-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 bc7d66b033c3d09c07ce3226cd534199a9f8cb2200a79035526192fb140b94d9 The package is designed to exfiltrate basic data, like hostname and OS details, as well as collect information about the stacktrace it's imported from. ---...
MAL-2024-9963 Malicious code in confluent-docker-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 bc7d66b033c3d09c07ce3226cd534199a9f8cb2200a79035526192fb140b94d9 The package is designed to exfiltrate basic data, like hostname and OS details, as well as collect information about the stacktrace it's imported from. ---...