CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: git-lfs, kube-vip-cloud-provider, custom-pod-autoscaler-operator, gostatsd, shfmt, nats, linkerd2-proxy-init, rancher-machine, kube-vip, docker-credential-ecr-login, hivemind, newrelic-nri-statsd, cloud-provider-aws, ctop, pvc-autoresizer, local-path-provisioner,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-aws, addon-resizer, stakater-reloader, azuredisk-csi-fips, hivemind, linkerd2-proxy-init, container-object-storage-interface, nemo, prometheus-adapter, nvidia-nsight-compute-12.8, secrets-store-csi-driver-provider-aws-fips,...

Malicious code in confluent-examples-nodejs (npm)

The package confluent-examples-nodejs was found to contain malicious code...

MAL-2025-17485 Malicious code in confluent-examples-nodejs (npm)

The package confluent-examples-nodejs was found to contain malicious code...

CVE-2025-52999 vulnerabilities

Vulnerabilities for packages: confluent-common-docker, druid, scala, spark, gradle-stage0, tez, cassandra, cassandra-reaper...

GHSA-H46C-H94J-95F3 vulnerabilities

Vulnerabilities for packages: confluent-common-docker, druid, scala, spark, gradle-stage0, tez, cassandra, cassandra-reaper...

GHSA-WXR5-93PH-8WR9 vulnerabilities

Vulnerabilities for packages: wildfly, opensearch, jenkins, confluent-common-docker, strimzi-kafka-operator, apicurio-registry, sonarqube, druid, apache-activemq-artemis, tez, jenkins-plugin-manager, apache-nifi, akhq, celeborn, spdx-tools-java, cassandra-reaper, trino...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: sonarqube, apicurio-registry, jenkins, celeborn, kafka, wildfly, neo4j, akhq, ghidra, jenkins-plugin-manager, tez, apache-activemq-artemis, spdx-tools-java, cassandra-reaper, camunda-zeebe, confluent-kafka-jre-bcfips, hadoop-client-modules, opensearch,...

MAL-2025-4148 Malicious code in @confluent-cfet-medusa/dataset-designer (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @confluent-cfet-medusa/dataset-designer (npm)

--- -= Per source details. Do not edit below this line.=-...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: git-sync, kubernetes, hivemind, gops, hcloud, nodetaint, skopeo, kafka-proxy, flux, protoc-gen-go-grpc, docker-compose, supercronic, php-fpmexporter, kubeflow-katib, git-lfs, aws-network-policy-agent, cadvisor, openbao-k8s, kubewatch, cloud-provider-aws, kaniko,...

GHSA-QH8G-58PP-2WXH vulnerabilities

Vulnerabilities for packages: cruise-control-fips, clojure, spark-kubernetes-operator, zaproxy, celeborn, confluent-kafka, spark-kubernetes-operator-fips, spark, neo4j, akhq, apache-tika, solr, wso2is, zookeeper, cassandra-reaper, pinot, spark-fips, confluent-kafka-jre-bcfips, kayenta-fips,...

GHSA-G8M5-722R-8WHQ vulnerabilities

Vulnerabilities for packages: confluent-kafka, spark, zookeeper-fips, cassandra-reaper, spark-fips, apache-nifi, confluent-kafka-jre-bcfips, strimzi-kafka-operator, cloudwatch-exporter, apache-tika, celeborn, solr, druid, kafka, zookeeper...

CVE-2024-8184 vulnerabilities

Vulnerabilities for packages: confluent-kafka, spark, zookeeper-fips, cassandra-reaper, spark-fips, apache-nifi, confluent-kafka-jre-bcfips, strimzi-kafka-operator, cloudwatch-exporter, apache-tika, celeborn, solr, druid, kafka, zookeeper...

CVE-2024-6763 vulnerabilities

Vulnerabilities for packages: cruise-control-fips, clojure, spark-kubernetes-operator, zaproxy, celeborn, confluent-kafka, spark-kubernetes-operator-fips, spark, neo4j, akhq, apache-tika, solr, wso2is, zookeeper, cassandra-reaper, pinot, spark-fips, confluent-kafka-jre-bcfips, kayenta-fips,...

CVE-2024-47554 vulnerabilities

Vulnerabilities for packages: sonarqube, sonarqube-10, celeborn, kserve-modelmesh, confluent-kafka, kafka, wildfly, kserve, management-api-for-apache-cassandra-5.0, hadoop-fips, logstash, zookeeper, management-api-for-apache-cassandra-4.0, confluent-kafka-jre-bcfips,...

GHSA-735F-PC8J-V9W8 vulnerabilities

Vulnerabilities for packages: opensearch, kube-fluentd-operator, confluent-kafka, sonarqube-10, druid, tez, thingsboard, wavefront-proxy, kserve-modelmesh, apache-nifi, celeborn, trino...

CVE-2024-7254 vulnerabilities

Vulnerabilities for packages: opensearch, kube-fluentd-operator, confluent-kafka, sonarqube-10, druid, tez, thingsboard, wavefront-proxy, kserve-modelmesh, apache-nifi, celeborn, trino...

Malicious code in confluent-docker-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bc7d66b033c3d09c07ce3226cd534199a9f8cb2200a79035526192fb140b94d9 The package is designed to exfiltrate basic data, like hostname and OS details, as well as collect information about the stacktrace it's imported from. ---...

MAL-2024-9963 Malicious code in confluent-docker-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bc7d66b033c3d09c07ce3226cd534199a9f8cb2200a79035526192fb140b94d9 The package is designed to exfiltrate basic data, like hostname and OS details, as well as collect information about the stacktrace it's imported from. ---...