GHSA-642R-3GJ9-2PJ5 vulnerabilities

Vulnerabilities for packages: scala, apache-tika, druid, sonarqube, keycloak-config-cli, apicurio-registry, flyway, infinispan, dependency-track, apache-nifi, wildfly, spdx-tools-java, keycloak, apache-nifi-registry, spark, opensearch, akhq, logstash, trino, gradle, strimzi-kafka-operator, tez,...

CVE-2026-68494 vulnerabilities

Vulnerabilities for packages: scala, apache-tika, druid, sonarqube, keycloak-config-cli, apicurio-registry, flyway, infinispan, dependency-track, apache-nifi, wildfly, spdx-tools-java, keycloak, apache-nifi-registry, spark, opensearch, akhq, logstash, trino, gradle, strimzi-kafka-operator, tez,...

CVE-2026-89425 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-oauth-fips, metabase, hadoop-fips, floci-az, cruise-control-fips, celeborn, akhq, neo4j, camunda, logstash-fips, airbyte-platform-fips, opensearch-fips, ontop-fips, gradle, wso2is, cruise-control, flyway-fips, dependency-track, cassandra-reaper,...

GHSA-7HHH-6RMP-J9QF vulnerabilities

Vulnerabilities for packages: strimzi-kafka-oauth-fips, metabase, hadoop-fips, floci-az, cruise-control-fips, celeborn, akhq, neo4j, camunda, logstash-fips, airbyte-platform-fips, opensearch-fips, ontop-fips, gradle, wso2is, cruise-control, flyway-fips, dependency-track, cassandra-reaper,...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-oauth-fips, neo4j, wso2is, ontop, cassandra-reaper, apache-pulsar-fips, thingsboard, reposilite, kates-fips, request-9047-keycloak-fips, solr, kafka-bridge-fips, strimzi-kafka-operator-fips, localstack, flink-kubernetes-operator, kates, hono,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-oauth-fips, neo4j, wso2is, ontop, cassandra-reaper, apache-pulsar-fips, thingsboard, reposilite, kates-fips, request-9047-keycloak-fips, solr, kafka-bridge-fips, strimzi-kafka-operator-fips, localstack, flink-kubernetes-operator, kates, hono,...

GHSA-7HHH-6RMP-J9QF vulnerabilities

Vulnerabilities for packages: celeborn, management-api-for-apache-cassandra-5.0, keycloak-config-cli, neo4j, dependency-track, thingsboard, cassandra, strimzi-kafka-oauth, jenkins-plugin-manager, wildfly, spdx-tools-java, opensearch, akhq, logstash, gradle, cassandra-reaper, wavefront-proxy,...

CVE-2026-89425 vulnerabilities

Vulnerabilities for packages: celeborn, management-api-for-apache-cassandra-5.0, keycloak-config-cli, neo4j, dependency-track, thingsboard, cassandra, strimzi-kafka-oauth, jenkins-plugin-manager, wildfly, spdx-tools-java, opensearch, akhq, logstash, gradle, cassandra-reaper, wavefront-proxy,...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: celeborn, management-api-for-apache-cassandra-5.0, keycloak-config-cli, neo4j, dependency-track, thingsboard, cassandra, strimzi-kafka-oauth, jenkins-plugin-manager, wildfly, spdx-tools-java, opensearch, akhq, logstash, gradle, cassandra-reaper, wavefront-proxy,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: celeborn, management-api-for-apache-cassandra-5.0, keycloak-config-cli, neo4j, dependency-track, thingsboard, cassandra, strimzi-kafka-oauth, jenkins-plugin-manager, wildfly, spdx-tools-java, opensearch, akhq, logstash, gradle, cassandra-reaper, wavefront-proxy,...

kafka-keycloak-oauth

Apache Kafka 4.1.0 with Keycloak OAuth2 Authentication Production-ready Apache Kafka 4.1.0 KRaft mode with Keycloak 26.1.1 OAuth2/OIDC authentication using Strimzi Kafka image. Why This Project vs kafka-oauth-keycloak-tls-demo This is an evolution of the previous POC with significant improvements...

CLEANSTART-2026-UV31886 Security fix for CVE-2024-31573 applied in: strimzi-kafka-operator 0.47.0-r2

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YR80525 Security fix for CVE-2024-30171 applied in: strimzi-kafka-operator 0.47.0-r2

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-GK84785 Security fix for CVE-2024-29857 applied in: strimzi-kafka-operator 0.47.0-r2

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AT07752 Security fix for CVE-2024-29371 applied in: apache-nifi 2.6.0-r3, apache-nifi 2.7.2-r7, confluent-common-docker 7.6.9-r2, strimzi-kafka-operator 0.47.0-r2

CVE-2024-29371 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ML52514 Security fix for CVE-2022-42889 applied in: strimzi-kafka-operator 0.47.0-r2

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TZ12135 Security fix for CVE-2024-26308 applied in: apache-hive 4.0.0-r1, spark-sc212-jdk17-py311 3.4.4-r0, spark-sc213-jdk17-py312 3.5.8-r0, strimzi-kafka-operator 0.47.0-r2

CVE-2024-26308 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HE16906 Security fix for CVE-2024-25710 applied in: apache-hive 4.0.0-r1, spark-sc212-jdk17-py311 3.4.4-r0, spark-sc213-jdk17-py312 3.5.8-r0, strimzi-kafka-operator 0.47.0-r2

CVE-2024-25710 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TU89159 Security fix for CVE-2025-58057 applied in: apache-hive 4.0.0-r0, apache-hive 4.2.0-r1, cassandra 5.0.6-r2, cassandra-fips 5.0.6-r2, cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4, cassandra-reaper-fips 3.8.0-r9, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kogito-apps 10.1.0-r0, stargate 1.0.90-r4, stargate 2.0.44-r4, strimzi-kafka-operator 0.46.1-r4, strimzi-kafka-operator 0.47.0-r3, wavefront-proxy 13.9-r0

CVE-2025-58057 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BZ08231 Security fix for CVE-2026-6790 applied in: apache-hive 4.0.1-r8, apache-nifi 2.10.0-r3, apache-zookeeper 3.9.5-r8, cassandra-reaper-fips 3.8.0-r9, cassandra-reaper-fips 4.0.2-r3, cassandra-reaper-fips 4.1.1-r1, solr 10.0.0-r6, strimzi-kafka-operator 1.1.0-r2, trino 480-r10, trino 483-r1

CVE-2026-6790 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...