Approved changes feed: RSS · Atom
cpe:2.3:a:redpanda:redpanda:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Redpanda (d3f0720a-59a3-5fa1-ac1d-3f80fdc5e460) |
|---|---|
| Product | Redpanda (f5a34394-1c00-5358-a1ab-df82cb504f48) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/redpanda-data/redpanda |
purl2cpe | 2026-06-01 10:11:29.320793 |
pkg:golang/github.com/redpanda-data/redpanda |
purl2cpe | 2026-06-01 10:11:29.320796 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-50976 |
vulnerable | 2026-06-08 06:16:17.170137 |
Details available
Redpanda before 23.1.21 and 23.2.x before 23.2.18 has missing authorization checks in the Transactions API.
Published: 2023-12-17T00:00:00.000Z
Updated: 2025-05-20T18:23:43.433Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30450 |
vulnerable | 2026-06-08 06:04:39.394421 |
Details available
rpk in Redpanda before 23.1.2 mishandles the redpanda.rpc_server_tls field, leading to (for example) situations in which there is a data type mismatch that cannot be automatically fixed by rpk, and instead a user must reconfigure (while a cluster is turned off) in order to have TLS on broker RPC ports. NOTE: the fix was also backported to the 22.2 and 22.3 branches.
Published: 2023-04-08T00:00:00.000Z
Updated: 2025-02-12T16:22:02.700Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24619 |
vulnerable | 2026-06-08 05:56:06.166731 |
Details available
Redpanda before 22.3.12 discloses cleartext AWS credentials. The import functionality in the rpk binary logs an AWS Access Key ID and Secret in cleartext to standard output, allowing a local user to view the key in the console, or in Kubernetes logs if stdout output is collected. The fixed versions are 22.3.12, 22.2.10, and 22.1.12.
Published: 2023-02-13T00:00:00.000Z
Updated: 2025-03-21T18:06:40.109Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.