CVE-2026-49098 Apache Camel: Camel-Kafka: The kafka.OVERRIDE_TOPIC (and other kafka.*) Exchange header constants used non-Camel-prefixed names that bypass the upstream HTTP header filter, allowing an HTTP client to redirect Kafka messages to an arbitrary topic

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel Kafka Component. The camel-kafka producer can override its configured target topic at runtime from the kafka.OVERRIDETOPIC Exchange header:...

CVE-2026-49098

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel Kafka Component. The camel-kafka producer can override its configured target topic at runtime from the kafka.OVERRIDETOPIC Exchange header:...

PT-2026-55905

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.14.7 Apache Camel versions 4.15.0 through 4.18.2 Apache Camel versions 4.19.0 through 4.20.9 Description An injection issue exists in the Apache Camel Kafka component due to improper input validation and...

Important: Red Hat Security Advisory: Streams for Apache Kafka 2.9.4 release and security update

Streams for Apache Kafka 2.9.4 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for June 2026.

Summary Security vulnerabilities are addressed with IBM Business Automation Insights 24.0.1-IF008. These vulnerabilities have been also adressed in 24.0.0-IF007, 25.0.0-IF005 and 25.0.1-IF001. Vulnerability Details CVEID:CVE-2025-62718 DESCRIPTION: Axios is a promise based HTTP client for the...

Malicious code in confluent-kafka-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20f9433c5da4c3ee143c33ec2a876e07ff01aa1188d0efa783858bcd0903d3c Analysis of this package version produced no static indicator and no traced behavioral findings. The tarball does not exhibit lifecycle-script...

MAL-2026-6682 Malicious code in confluent-kafka-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20f9433c5da4c3ee143c33ec2a876e07ff01aa1188d0efa783858bcd0903d3c Analysis of this package version produced no static indicator and no traced behavioral findings. The tarball does not exhibit lifecycle-script...

Security Bulletin: Apache Kafka CVE-2026-35554 security vulnerability in FileNet Content Manager reported for BAI-EVENTS-JAVA-SDK

Summary Apache Kafka CVE-2026-35554 security vulnerability in FileNet Content Manager. Affected and vulnerable Vulnerability Details CVEID:CVE-2026-35554 DESCRIPTION: A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to...

ROOT-APP-MAVEN-CVE-2025-27817 CVE-2025-27817 in io.root.org.apache.kafka:kafka-clients - Patched by Root

Root has patched CVE-2025-27817 in the io.root.org.apache.kafka:kafka-clients package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-56128 CVE-2024-56128 in io.root.org.apache.kafka:kafka_2.12 - Patched by Root

Root has patched CVE-2024-56128 in the io.root.org.apache.kafka:kafka2.12 package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-27818 CVE-2025-27818 in io.root.org.apache.kafka:kafka_2.12 - Patched by Root

Root has patched CVE-2025-27818 in the io.root.org.apache.kafka:kafka2.12 package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-35554 CVE-2026-35554 in io.root.org.apache.kafka:kafka-clients - Patched by Root

Root has patched CVE-2026-35554 in the io.root.org.apache.kafka:kafka-clients package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-33558 CVE-2026-33558 in io.root.org.apache.kafka:kafka-clients - Patched by Root

Root has patched CVE-2026-33558 in the io.root.org.apache.kafka:kafka-clients package for Root:Maven. Multiple fixed versions available...

ROS-20260629-73-0023

The vulnerability of the Apache Kafka message dispatcher is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrity of the protected information...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: calico-fips, flux-fips, kubescape-server, kots, argo-cd-fips, kine, fscrypt, trivy, chisel-fips, k9s-fips, istio, harbor, cloud-provider-aws, flux-source-controller-fips, seaweedfs-rocksdb-fips, traefik-fips, coder-fips, skaffold-fips, aactl, grafana,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: calico-fips, flux-fips, apko-fips, crossplane-provider-azure-orbital, splunk-otel-collector-fips, syft, kubescape-server, kots, argo-cd-fips, kine, policy-controller-fips, melange, crossplane-provider-azure-storagesync, crossplane-provider-azure-solutions,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: calico-fips, flux-fips, apko-fips, crossplane-provider-azure-orbital, splunk-otel-collector-fips, syft, kubescape-server, kots, argo-cd-fips, kine, policy-controller-fips, melange, crossplane-provider-azure-storagesync, crossplane-provider-azure-solutions,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: calico-fips, flux-fips, apko-fips, syft, kubescape-server, kots, argo-cd-fips, kine, melange, step-kms-plugin, fscrypt, trivy, k9s-fips, istio, harbor, cloud-provider-aws, flux-source-controller-fips, packer, podman, scorecard, pulumi, pulumi-kubernetes-operator,...

ROS-20260625-73-0022

The vulnerability in Apache Kafka is related to incorrect checking of the specified index, position, or offset in the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Apache Kafka (CVE-2026-35554)

Summary A vulnerability in Apache Kafka that is used by InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2026-33558 DESCRIPTION: Information exposure vulnerability has been identified in Apache Kafka. The NetworkClient component will output entire requests and response...