CLEANSTART-2026-VH00240 Security fixes for CVE-2024-45993, CVE-2025-11143, CVE-2025-31344, CVE-2026-1605, CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142, CVE-2026-27145, CVE-2026-42504, CVE-2026-42507, ghsa-3677-xxcr-wjqv, ghsa-72hv-8253-57qq, ghsa-vc5p-v9hr-52mj applied in versions: 4.0.1-r0, 4.0.1-r1, 4.0.1-r2, 4.0.1-r3, 4.3.0-r0

Multiple security vulnerabilities affect the kafka package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PV53006 Security fixes for CVE-2025-67030, CVE-2026-33811, CVE-2026-33814, CVE-2026-34479, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-6fmv-xxpf-w3cw, ghsa-72hv-8253-57qq applied in versions: 8.2.0-r0, 8.2.0-r1, 8.2.0-r2

Multiple security vulnerabilities affect the confluent-kafka package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OO47906 Security fixes for GHSA-VC5P-V9HR-52MJ applied in versions: 4.1.1-r0

Security vulnerability affects the kafka package. This issue is resolved in later releases. See references for vulnerability details...

Malicious Package

Overview confluent-kafka is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Critical Photon OS Security Update - PHSA-2025-4.0-0834

Updates of 'linux', 'libxml2', 'kafka' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2025-5.0-0537

Updates of 'cpio', 'kafka', 'apache-tomcat10', 'wireshark', 'apache-tomcat9' packages of Photon OS have been released...

CVE-2025-22869 vulnerabilities

Vulnerabilities for packages: containerd, opencost, vcluster, crossplane, grafana-alloy, secrets-store-csi-driver-provider-azure, dex, gitsign, crossplane-provider-aws-memorydb, docker-credential-acr-env, kubernetes-dns-node-cache, seaweedfs, ferretdb, kubeflow-pipelines, gobuster, kube-vip,...

CVE-2024-7254 vulnerabilities

Vulnerabilities for packages: apache-nifi, sonarqube-10, ruby3.4-fluentd-kubernetes-daemonset, kube-fluentd-operator, knative-kafka-broker, druid, tez, ruby3.3-fluentd-kubernetes-daemonset, hadoop-client-modules, opensearch, kafka, ruby3.2-fluentd-kubernetes-daemonset, elasticsearch,...

CVE-2023-44981 vulnerabilities

Vulnerabilities for packages: trino...

CVE-2023-43642 vulnerabilities

Vulnerabilities for packages: druid...