ai.chronon:flink_2.12 (>=0.0.62 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91), ai.chronon:online_2.11 (>=0.0.25 <=revert-391-thread-0.0.24) +6989 more potentially affected by CVE-2026-33558 via org.apache.kafka:kafka-clients (>=0.11.0.0 <=3.9.1)

org.apache.kafka:kafka-clients MAVEN version =0.11.0.0, =0.0.62, =0.0.25, =0.0.25, =0.0.25, =0.0.86, =0.0.86, =0.0.1, =0.0.1, =thread-pool-0.0.24-dev, =0.0.6, =1.0.6, =1.0.6, =0.0.2, =0.3.0 and more Source cves: CVE-2026-33558 Source advisory: OSV:GHSA-WF66-MPHR-4C4R...

CVE-2025-66118

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BoldGrid Sprout Clients sprout-clients allows Reflected XSS.This issue affects Sprout Clients: from n/a through = 3.2.1...

EUVD-2018-0774

Malware in sbrugna...

EUVD-2017-0129

Malware in sbrugna...

EUVD-2023-26991

Malicious code in bioql PyPI...

EUVD-2023-26990

Malicious code in bioql PyPI...

Security Bulletin: There is a vulnerability in kafka-clients-3.8.0.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2025-27817)

Summary There is a vulnerability in kafka-clients-3.8.0.jar used by IBM Maximo Manage application in IBM Maximo Application Suite. Vulnerability Details CVEID:CVE-2025-27817 DESCRIPTION: A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. Apache Kafka...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in kafka-clients-3.4.0.jar

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of kafka-clients-3.4.0.jar Vulnerability Details CVEID:CVE-2024-31141 DESCRIPTION: Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients. Apache Kafka Clients...

PT-2025-29108 · Zoom Video Communications · Zoom Clients For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Clients for Windows affected versions not specified Description: A buffer overflow issue exists in certain Zoom Clients for Windows. This issue may allow an authorized user to cause a denial of service through network access...

PT-2025-29111 · Zoom Video Communications · Zoom Clients For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Clients for Windows affected versions not specified Description: A buffer overflow issue exists in certain Zoom Clients for Windows. This issue may allow an authorised user to cause a denial of service through network access...

PT-2025-29109 · Zoom Video Communications · Zoom Client

Name of the Vulnerable Software and Affected Versions: Zoom Clients versions prior to 6.4.5 Description: Cross-site scripting may allow an authenticated user to conduct a disclosure of information via network access. Recommendations: Update Zoom Clients to version 6.4.5 or later...

ai.intelliswarm:swarmai-eval (>=1.0.6 <=1.0.28), ai.intelliswarm:swarmai-rag (=1.0.28) +3069 more potentially affected by CVE-2025-27817 via org.apache.kafka:kafka-clients (>=3.1.0 <=3.9.0)

org.apache.kafka:kafka-clients MAVEN version =3.1.0, =1.0.6, =1.0.6, =0.1, =3.0.1, =2.8.4-alpha2, =1.0.0, =1.0.0-beta, =0.0.1-alpha1, =0.0.1, =0.0.4, =0.1.0, =1.0.0.RELEASE, =1.0.2.RELEASE and more Source cves: CVE-2025-27817 Source advisory: SNYK:JAVA-ORGAPACHEKAFKA-10336719...

ai.chronon:flink_2.12 (>=0.0.62 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91), ai.chronon:online_2.11 (>=0.0.25 <=revert-391-thread-0.0.24) +5770 more potentially affected by CVE-2025-27819 via org.apache.kafka:kafka-clients (>=2.0.0 <=3.9.0)

org.apache.kafka:kafka-clients MAVEN version =2.0.0, =0.0.62, =0.0.25, =0.0.25, =0.0.25, =0.0.86, =0.0.86, =0.0.1, =0.0.1, =thread-pool-0.0.24-dev, =0.0.6, =1.0.6, =1.0.6, =0.0.2, =0.3.0 and more Source cves: CVE-2025-27819 Source advisory: SNYK:JAVA-ORGAPACHEKAFKA-10350513...

Security Bulletin: There is a vulnerability in kafka-clients-3.6.0.jar used by IBM Maximo Asset Management application (CVE-2024-31141)

Summary There is a vulnerability in kafka-clients-3.6.0.jar used by IBM Maximo Asset Management application CVE-2024-31141 Vulnerability Details CVEID:CVE-2024-31141 DESCRIPTION: Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka...

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to kafka-clients-3.7.1.jar CVE-2024-31141

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to kafka-clients-3.7.1.jar CVE-2024-31141. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-31141 DESCRIPTION: Files or Directories Accessible to External Parties,...

ai.chronon:flink_2.12 (>=0.0.62 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91), ai.chronon:online_2.12 (>=0.0.25 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91) +4792 more potentially affected by CVE-2024-31141 via org.apache.kafka:kafka-clients (>=2.3.0 <=3.7.0)

org.apache.kafka:kafka-clients MAVEN version =2.3.0, =0.0.62, =0.0.25, =0.0.25, =0.0.86, =0.0.86, =thread-pool-0.0.24-dev, =0.0.6, =0.0.2, =0.1, =0.2.7, =0.2.7, =3.0.1, =2.8.4-alpha1, =1.0.0, =1.0.5 and more Source cves: CVE-2024-31141 Source advisory: OSV:GHSA-2X2G-32R7-P4X8...

The vulnerability of the network software product BIG-IP Access Policy Manager Clients (APM Clients), a control device for access control and remote authentication, stems from the transmission of data in an open manner. This vulnerability allows attackers to execute attacks like TunnelCrack.

The vulnerability of the network software product BIG-IP Access Policy Manager Clients APM Clients is related to the transmission of data in an open manner. Exploiting this vulnerability allows a malicious actor to execute the TunnelCrack attack by redirecting traffic...

CVE-2022-39168

IBM Robotic Process Automation Clients are vulnerable to proxy credentials being exposed in upgrade logs. IBM X-Force ID: 235422...

com.avsystem.commons:commons-kafka_2.11 (>=1.23.1 <=1.27.3), com.avsystem.commons:commons-kafka_2.12 (>=1.23.1 <=1.27.3) +169 more potentially affected by CVE-2017-12610 via org.apache.kafka:kafka-clients (>=0.11.0.0 <=0.11.0.1)

org.apache.kafka:kafka-clients MAVEN version =0.11.0.0, =1.23.1, =1.23.1, =2.6.0, =2.6.0, =2.6.0, =2.6.0, =2.6.0, =2.6.0, =1.1.0, =0.1, =3.1.0, =1.0.6, =1.0.6, =1.0.10, =0.1.1, =0.2.11 and more Source cves: CVE-2017-12610 Source advisory: OSV:GHSA-XM78-4M3G-7WM7...

ai.chronon:online_2.13 (>=0.0.25 <=revert-391-thread-0.0.24), ai.chronon:service_2.13 (>=0.0.86 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91) +1025 more potentially affected by CVE-2021-38153 via org.apache.kafka:kafka-clients (=2.8.0)

org.apache.kafka:kafka-clients MAVEN version =2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kafka:kafka-clients and may be impacted: - ai.chronon:online2.13 =0.0.25, =0.0.86, =0.1.7, =0.1.7, =0.1.7, =1.6.0-micronaut-2.0, =0.9.0,...