AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

Apache Kafka security advisories

10 advisories · 2 critical or high in 12 months · latest Apr 20

Repository

10 advisories

Critical 9.1Apr 20Apache Kafka does not validate JWT tokens in its OAUTHBEARER authentication implementationCVE-2026-33557fixed in 4.1.2Medium 5.3Apr 20Apache Kafka exposes sensitive information in its DEBUG logsCVE-2026-33558fixed in 3.9.2 +1High 8.7Apr 7Apache Kafka Clients: Kafka Producer Message Corruption and Misrouting via Buffer Pool Race ConditionCVE-2026-35554fixed in 3.9.2 +2High 8.8Jun 10, 2025Apache Kafka Deserialization of Untrusted Data vulnerabilityCVE-2025-27818fixed in 3.9.1High 8.8Jun 10, 2025Apache Kafka Deserialization of Untrusted Data vulnerabilityCVE-2025-27819fixed in 3.4.0Medium 7.5Jun 10, 2025Apache Kafka Client Arbitrary File Read and Server Side Request Forgery VulnerabilityCVE-2025-27817fixed in 3.9.1Low 5.3Dec 18, 2024Apache Kafka's SCRAM implementation Incorrectly Implements Authentication AlgorithmCVE-2024-56128fixed in 3.7.2 +1Medium 6.5Nov 19, 2024Apache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProviderCVE-2024-31141fixed in 3.7.1Medium 6.8May 13, 2022Improper Authentication in Apache KafkaCVE-2017-12610fixed in 0.10.2.2 +1Medium 5.9Sep 23, 2021Observable Discrepancy in Apache KafkaCVE-2021-38153fixed in 2.6.3 +2
About Apache Kafka

Distributed event streaming.

Packages watched: org.apache.kafka:kafka-clients (Maven), org.apache.kafka:kafka_2.13 (Maven).

apache/kafkaOn Repos