CLEANSTART-2026-YX54699 race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics

🗓️ 25 Apr 2026 00:46:03Reported by GoogleType

osv🔗 osv.dev👁 6 Views

Multiple vulnerabilities affect strimzi-kafka-operator; a race in Kafka producer buffer pool may deliver messages to wrong topics.

Reporter	Title	Published	Views	Family All 1275
OSV	MINI-F5WV-3FQW-VCHR	12 Apr 202614:00	–	osv
OSV	MINI-F65Q-JJJM-63G9	14 Apr 202614:45	–	osv
OSV	MINI-F7CG-MJ7J-J8F7	6 Mar 202613:45	–	osv
OSV	MINI-FFP9-8C2J-48JC	28 Mar 202617:23	–	osv
OSV	MINI-FHWX-WJRG-XGQC	18 Jun 202607:50	–	osv
OSV	MINI-FJ84-FWP4-HPV5	31 Mar 202602:01	–	osv
OSV	MINI-FP37-J59R-69F8	6 Mar 202613:45	–	osv
OSV	MINI-FVVR-9PRR-C5HP	20 Apr 202611:00	–	osv
OSV	MINI-FWHR-8JC4-VPW2	19 Mar 202614:15	–	osv
OSV	MINI-G848-FHQC-C6HQ	14 Apr 202615:01	–	osv

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-YX54699.json
osv	www.osv.dev/vulnerability/CVE-2025-11143
osv	www.osv.dev/vulnerability/CVE-2026-1605
osv	www.osv.dev/vulnerability/CVE-2026-33870
osv	www.osv.dev/vulnerability/CVE-2026-33871
osv	www.osv.dev/vulnerability/CVE-2026-35554
osv	www.osv.dev/vulnerability/ghsa-72hv-8253-57qq
osv	www.osv.dev/vulnerability/ghsa-cphf-4846-3xx9
osv	www.osv.dev/vulnerability/ghsa-pwqr-wmgm-9rr8
osv	www.osv.dev/vulnerability/ghsa-w9fj-cfpg-grvv

27 Jun 2026 01:15Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.19.8

EPSS0.01125