CVE-2024-56128 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator...

CVE-2025-27817 vulnerabilities

Vulnerabilities for packages: apicurio-registry, thingsboard, wildfly, apache-nifi, druid, zipkin, opensearch, logstash, strimzi-kafka-operator...

GHSA-VGQ5-3255-V292 vulnerabilities

Vulnerabilities for packages: apicurio-registry, thingsboard, wildfly, apache-nifi, druid, zipkin, opensearch, logstash, strimzi-kafka-operator...

CVE-2025-27817 vulnerabilities

Vulnerabilities for packages: druid, thingsboard, zipkin, apicurio-registry, apache-nifi, logstash, strimzi-kafka-operator, wildfly, opensearch...

GHSA-VGQ5-3255-V292 vulnerabilities

Vulnerabilities for packages: druid, thingsboard, zipkin, apicurio-registry, apache-nifi, logstash, strimzi-kafka-operator, wildfly, opensearch...

GHSA-WXR5-93PH-8WR9 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, apicurio-registry, spdx-tools-java, akhq, opensearch, sonarqube, apache-nifi, druid, jenkins, wildfly, trino, tez, confluent-common-docker, celeborn, jenkins-plugin-manager, apache-activemq-artemis, cassandra-reaper...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, apicurio-registry, kafka, jenkins, strimzi-kafka-operator, wildfly, confluent-common-docker, jenkins-plugin-manager, neo4j, cassandra-reaper, trino, akhq, confluent-kafka-jre-bcfips, solr-fips, spdx-tools-java, hadoop-client-modules,...

CVE-2025-24970 vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, apicurio-registry, kafka, docker-selenium, zookeeper, flyway, zookeeper-fips, strimzi-kafka-operator, wildfly, kserve-modelmesh, seata, thingsboard, neo4j, cloudwatch-exporter, cassandra-reaper, trino, management-api-for-apache-cassandra-5.0,...

CVE-2025-24970 vulnerabilities

Vulnerabilities for packages: zookeeper, apache-activemq-artemis, trino, tez, strimzi-kafka-operator, docker-selenium, apicurio-registry, thingsboard, management-api-for-apache-cassandra-5.0, wavefront-proxy, flyway, kserve-modelmesh, celeborn, keycloak, selenium, cassandra-reaper, apache-nifi,...

GHSA-4G8C-WM8X-JFHW vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, apicurio-registry, kafka, docker-selenium, zookeeper, flyway, zookeeper-fips, strimzi-kafka-operator, wildfly, kserve-modelmesh, seata, thingsboard, neo4j, cloudwatch-exporter, cassandra-reaper, trino, management-api-for-apache-cassandra-5.0,...

GHSA-4G8C-WM8X-JFHW vulnerabilities

Vulnerabilities for packages: zookeeper, apache-activemq-artemis, trino, tez, strimzi-kafka-operator, docker-selenium, apicurio-registry, thingsboard, management-api-for-apache-cassandra-5.0, wavefront-proxy, flyway, kserve-modelmesh, celeborn, keycloak, selenium, cassandra-reaper, apache-nifi,...

GHSA-2X2G-32R7-P4X8 vulnerabilities

Vulnerabilities for packages: druid, thingsboard, apache-nifi, logstash, strimzi-kafka-operator...

GHSA-2X2G-32R7-P4X8 vulnerabilities

Vulnerabilities for packages: thingsboard, apache-nifi, druid, logstash, strimzi-kafka-operator...

CVE-2024-31141 vulnerabilities

Vulnerabilities for packages: thingsboard, apache-nifi, druid, logstash, strimzi-kafka-operator...

CVE-2024-31141 vulnerabilities

Vulnerabilities for packages: druid, thingsboard, apache-nifi, logstash, strimzi-kafka-operator...

Moderate: Red Hat Security Advisory: Red Hat AMQ Streams 2.5.2 release and security update

Red Hat AMQ Streams 2.5.2 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Missing Authentication

io. strimzi, strimzi is vulnerable to Missing Authentication. The vulnerability is due to improper access control implementation in the Kafka Connect REST API within the STRIMZI Project. The vulnerability allows attackers to exploit the API to potentially deny service for Kafka Mirroring, mirror...

SUSE CVE-2024-36543

Incorrect access control in the Kafka Connect REST API in the STRIMZI Project 0.41.0 and earlier allows an attacker to deny the service for Kafka Mirroring, potentially mirror the topics' content to his Kafka cluster via a malicious connector bypassing Kafka ACL if it exists, and potentially stea...

GHSA-Q2XX-F8R3-9MG5 STRIMZI incorrect access control

Incorrect access control in the Kafka Connect REST API in the STRIMZI Project 0.41.0 and earlier allows an attacker to deny the service for Kafka Mirroring, potentially mirror the topics' content to his Kafka cluster via a malicious connector bypassing Kafka ACL if it exists, and potentially stea...

STRIMZI incorrect access control

Incorrect access control in the Kafka Connect REST API in the STRIMZI Project 0.41.0 and earlier allows an attacker to deny the service for Kafka Mirroring, potentially mirror the topics' content to his Kafka cluster via a malicious connector bypassing Kafka ACL if it exists, and potentially stea...