6 matches found
CVE-2026-124465
Trendyol kafka-konsumer from 2.3.3 before 2.6.18 contains a denial of service vulnerability in batchconsumer.go that panics when a single record exceeds MessageGroupByteSizeLimit. Attackers able to produce to the consumed topic can publish one oversized record that terminates the consumer before...
CVE-2026-124465 Trendyol kafka-konsumer 2.3.3 before 2.6.18 Denial of Service via Batch Consumer Panic
Trendyol kafka-konsumer from 2.3.3 before 2.6.18 contains a denial of service vulnerability in batchconsumer.go that panics when a single record exceeds MessageGroupByteSizeLimit. Attackers able to produce to the consumed topic can publish one oversized record that terminates the consumer before...
CVE-2026-124465
The Trendyol kafka-konsumer (versions 2.3.3 before 2.6.18) is vulnerable to a Denial of Service (DoS) condition located in batch_consumer.go. The root cause is a panic triggered when a single record exceeds the MessageGroupByteSizeLimit. An attacker with the ability to produce messages to a consu...
EUVD-2026-119605
Trendyol kafka-konsumer from 2.3.3 before 2.6.18 contains a denial of service vulnerability in batchconsumer.go that panics when a single record exceeds MessageGroupByteSizeLimit. Attackers able to produce to the consumed topic can publish one oversized record that terminates the consumer before...
PT-2026-140009
Trendyol kafka-konsumer from 2.3.3 before 2.6.18 contains a denial of service vulnerability in batch consumer.go that panics when a single record exceeds MessageGroupByteSizeLimit. Attackers able to produce to the consumed topic can publish one oversized record that terminates the consumer before...
CVE-2026-124465: Trendyol kafka-konsumer: Trendyol kafka-konsumer from 2.3.3 before 2.6.18 contains a denial of service vulnerability in batch_consumer.go that…
Trendyol kafka-konsumer from 2.3.3 before 2.6.18 contains a denial of service vulnerability in batchconsumer.go that panics when a single record exceeds MessageGroupByteSizeLimit. Attackers able to produce to the consumed topic can publish one oversized record that terminates the consumer before...