Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-28jg-cgg7-j4wc
  • Maven/org.apache.kafka:kafka-clients
 Apache Kafka does not validate JWT tokens in its OAUTHBEARER authentication implementation 20 Apr
  • Fix available
  • Severity - 9.1 (Critical)
GHSA-wf66-mphr-4c4r
  • Maven/org.apache.kafka:kafka-clients
 Apache Kafka exposes sensitive information in its DEBUG logs 20 Apr
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-5qcv-4rpc-jp93
  • Maven/org.apache.kafka:kafka-clients
 Apache Kafka Clients: Kafka Producer Message Corruption and Misrouting via Buffer Pool Race Condition 07 Apr
  • Fix available
  • Severity - 8.7 (High)
GHSA-vgq5-3255-v292
  • Maven/org.apache.kafka:kafka-clients
 Apache Kafka Client Arbitrary File Read and Server Side Request Forgery Vulnerability 10 Jun 2025
  • Fix available
  • Severity - 6.2 (Medium)
GHSA-2x2g-32r7-p4x8
  • Maven/org.apache.kafka:kafka-clients
 Apache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProvider 19 Nov 2024
  • Fix available
  • Severity - 6.8 (Medium)
GHSA-xm78-4m3g-7wm7
  • Maven/org.apache.kafka:kafka-clients
 Improper Authentication in Apache Kafka 13 May 2022
  • Fix available
  • Severity - 6.8 (Medium)
GHSA-3j6g-hxx5-3q26
  • Maven/org.apache.kafka:kafka-clients
  • Maven/org.apache.kafka:kafka_2.11
  • Maven/org.apache.kafka:kafka_2.12
  • Maven/org.apache.kafka:kafka_2.13
 Observable Discrepancy in Apache Kafka 23 Sep 2021
  • Fix available
  • Severity - 5.9 (Medium)