EUVD-2020-0414

Malware in sbrugna...

EUVD-2021-1963

Malware in sbrugna...

EUVD-2022-3959

Malicious code in bioql PyPI...

EUVD-2025-17640

Malicious code in bioql PyPI...

EUVD-2022-2333

Malicious code in bioql PyPI...

EUVD-2022-5820

Malicious code in bioql PyPI...

EUVD-2022-6777

Malicious code in bioql PyPI...

EUVD-2025-17641

Malicious code in bioql PyPI...

EUVD-2025-17363

Malicious code in bioql PyPI...

EUVD-2025-17639

Malicious code in bioql PyPI...

PT-2025-40611

CVE-2025-61596 - Apache Kafka Deserialization RCE CVE ID : CVE-2025-61596 Published : Oct. 1, 2025, 5:15 p.m. | 3 hours, 57 minutes ago Description : Rejected reason: This is a fork and is not in the Rust registry. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected...

Important: Red Hat Security Advisory: Streams for Apache Kafka 3.0.1 release and security update

Streams for Apache Kafka 3.0.1 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Security Bulletin: Multiple vulnerabilities in embedded Navigator affect IBM Business Automation Workflow - CVE-2024-38808, CVE-2024-31141

Summary IBM Business Automation Workflow repackages a version of IBM Content Navigator, which in turn repackages a vulnerable version of the kafka-clients library. Vulnerability Details CVEID:CVE-2024-31141 DESCRIPTION: Files or Directories Accessible to External Parties, Improper Privilege...

ROS-20250804-02

A vulnerability in Apache Kafka Message Manager is related to flaws in the deserialization mechanism. Exploitation of the vulnerability could allow an attacker acting remotely to execute remote code Vulnerability in sasl.oauthbearer.token.endpoint.url and sasl.oauthbearer.jwks.endpoint.url client...

kafka: Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption

A flaw was found in Apache Kafka's implementation of the Salted Challenge Response Authentication Mechanism SCRAM, which did not fully adhere to the requirements of RFC 5802. Specifically, as per RFC 5802, the server must verify that the nonce sent by the client in the second message matches the...

Important: Red Hat Security Advisory: Streams for Apache Kafka 3.0.0 release and security update

Streams for Apache Kafka 3.0.0 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Improper Privilege Management vulnerability in Apache Kafka Client

Apache Kafka Clients are vulnerable to improper privilege management due to the use of ConfigProvider plugins that can read from disk or environment variables. This could allow an attacker to read arbitrary contents of the disk and environment variables, potentially escalating from REST API acces...

BIT-KAFKA-2025-27817 Apache Kafka Client: Arbitrary file read and SSRF vulnerability

A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. Apache Kafka Clients accept configuration data for setting the SASL/OAUTHBEARER connection with the brokers, including "sasl.oauthbearer.token.endpoint.url" and "sasl.oauthbearer.jwks.endpoint.url"...

The vulnerability of the Apache Kafka message dispatcher, related to deserialization mechanism flaws, allows attackers to execute remote code.

The vulnerability of the Apache Kafka message dispatcher is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute remote code...

The vulnerability of the Apache Kafka message dispatcher, related to deserialization mechanism flaws, allows attackers to trigger a service failure.

The vulnerability of the Apache Kafka message broker is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow a malicious actor to cause a service failure...