5 matches found
EUVD-2022-6777
Malicious code in bioql PyPI...
EUVD-2022-5820
Malicious code in bioql PyPI...
CVE-2025-27818
A possible security vulnerability has been identified in Apache Kafka. This requires access to a alterConfig to the cluster resource, or Kafka Connect worker, and the ability to create/modify connectors on it with an arbitrary Kafka client SASL JAAS config and a SASL-based security protocol, whic...
CVE-2025-27818
A security vulnerability in Apache Kafka allows an authenticated operator with access to alterConfig or the Kafka Connect REST API to inject an arbitrary SASL JAAS config . By setting the sasl.jaas.config property to com.sun.security.auth.module.LdapLoginModule via specific override properties, a...
CVE-2025-27818 Apache Kafka: Possible RCE attack via SASL JAAS LdapLoginModule configuration
A possible security vulnerability has been identified in Apache Kafka. This requires access to a alterConfig to the cluster resource, or Kafka Connect worker, and the ability to create/modify connectors on it with an arbitrary Kafka client SASL JAAS config and a SASL-based security protocol, whic...