org.apache.pulsar:pulsar-io-debezium-core (2.4.2), org.apache.pulsar:pulsar-io-debezium-mysql (2.4.2) +1 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.4.2)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.4.2 -...

org.apache.pulsar:pulsar-io-debezium (2.2.1) potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.2.1)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium 2.2.1 Source cves:...

org.apache.pulsar:pulsar-io-debezium (2.2.0) potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.2.0)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium 2.2.0 Source cves:...

org.apache.pulsar:pulsar-io-debezium-core (2.4.1), org.apache.pulsar:pulsar-io-debezium-mysql (2.4.1) +1 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.4.1)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.4.1 -...

org.apache.pulsar:pulsar-io-debezium-core (2.7.5), org.apache.pulsar:pulsar-io-debezium-mongodb (2.7.5) +2 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.7.5)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.7.5 -...

org.apache.pulsar:pulsar-io-debezium-core (2.8.4), org.apache.pulsar:pulsar-io-debezium-mongodb (2.8.4) +3 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.8.4)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.8.4 -...

org.apache.pulsar:pulsar-io-debezium-core (2.11.4), org.apache.pulsar:pulsar-io-debezium-mongodb (2.11.4) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.11.4)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.11.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.11.4 -...

org.apache.pulsar:pulsar-io-debezium-core (2.7.2), org.apache.pulsar:pulsar-io-debezium-mongodb (2.7.2) +2 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.7.2)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.7.2 -...

org.apache.pulsar:pulsar-io-debezium-core (2.7.3), org.apache.pulsar:pulsar-io-debezium-mongodb (2.7.3) +2 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.7.3)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.7.3 -...

org.apache.pulsar:pulsar-io-debezium-core (2.9.5), org.apache.pulsar:pulsar-io-debezium-mongodb (2.9.5) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.9.5)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.9.5 -...

org.apache.pulsar:pulsar-io-debezium-core (2.10.6), org.apache.pulsar:pulsar-io-debezium-mongodb (2.10.6) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.10.6)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.10.6 -...

org.apache.pulsar:pulsar-io-debezium-core (2.11.1), org.apache.pulsar:pulsar-io-debezium-mongodb (2.11.1) +5 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.11.1)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.11.1 -...

org.apache.pulsar:pulsar-io-debezium-core (2.6.4), org.apache.pulsar:pulsar-io-debezium-mongodb (2.6.4) +2 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.6.4)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.6.4 -...

org.apache.pulsar:pulsar-io-debezium-core (2.7.1), org.apache.pulsar:pulsar-io-debezium-mongodb (2.7.1) +2 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (2.7.1)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-io-kafka-connect-adaptor and may be impacted: - org.apache.pulsar:pulsar-io-debezium-core 2.7.1 -...

CVE-2025-30677

Apache Pulsar contains multiple connectors for integrating with Apache Kafka. The Pulsar IO Apache Kafka Source Connector, Sink Connector, and Kafka Connect Adaptor Sink Connector log sensitive configuration properties in plain text in application logs. This vulnerability can lead to unintended...

org.apache.pulsar:pulsar-io-debezium (>=2.2.0, <=2.2.1), org.apache.pulsar:pulsar-io-debezium-core (>=2.4.0, <=2.11.4) +6 more potentially affected by CVE-2025-30677 via org.apache.pulsar:pulsar-io-kafka-connect-adaptor (>=2.2.0, <=2.11.4)

org.apache.pulsar:pulsar-io-kafka-connect-adaptor MAVEN version =2.2.0, =2.2.0, =2.4.0, =2.5.0, =2.9.0, =2.4.0, =2.9.0, =2.4.0, =2.8.0, =2.11.4 Source cves: CVE-2025-30677 Source advisory: MEND:CVE-2025-30677...

PT-2025-15772 · Vibethemes · Vibethemes Bp Social Connect

Name of the Vulnerable Software and Affected Versions: VibeThemes BP Social Connect versions 1.6.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS attacks. This means that an attacker can inject malicious...

CVE-2025-30677: Insertion of Sensitive Information into Log File

Apache Pulsar contains multiple connectors for integrating with Apache Kafka. The Pulsar IO Apache Kafka Source Connector, Sink Connector, and Kafka Connect Adaptor Sink Connector log sensitive configuration properties in plain text in application logs. This vulnerability can lead to unintended...

PT-2025-15820

Name of the Vulnerable Software and Affected Versions: Verowa Connect versions 3.0.5 and earlier Description: The issue is related to an SQL Injection vulnerability, specifically Improper Neutralization of Special Elements used in an SQL Command, which allows Blind SQL Injection. Recommendations:...

PT-2025-15787 · WordPress · Click & Pledge Connect Plugin

Name of the Vulnerable Software and Affected Versions: Click & Pledge Connect Plugin versions 2.24080000 through WP6.6.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...