CLEANSTART-2026-RP92768

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-RP92768.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-RP92768
Upstream
Published
2026-10-22T00:38:15Z
Modified
2026-10-22T01:00:16Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS Calculator
Summary
Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs
Details

Security vulnerability affects the kafka package. The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs.

References

Affected packages

CleanStart / kafka

Package

Name
kafka
Purl
pkg:apk/cleanstart/kafka

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.1.2-r5

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-RP92768.json"