Apache Kafka Client - Arbitrary File Read

Apache Kafka Client contains arbitrary file read and server-side request forgery caused by untrusted configuration of sasl.oauthbearer.token.endpoint.url and sasl.oauthbearer.jwks.endpoint.url, letting attackers read files or send requests to unintended locations, exploit requires untrusted party...

Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - IoT Component uses...

CLEANSTART-2026-AB85050 Security fixes in kafka_exporter-fips 1.6.0-r0

Package kafkaexporter-fips version 1.6.0-r0 fixes 8 vulnerabilities: ghsa-8r3f-844c-mc37, CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730...

CLEANSTART-2026-QD76770 Security fixes in kafka 4.3.0-r0

Package kafka version 4.3.0-r0 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-QU19901 Security fixes in kafka 4.1.2-r0

Package kafka version 4.1.2-r0 fixes 10 vulnerabilities: CVE-2026-34477, ghsa-6hg6-v5c8-fphq, CVE-2026-34478, ghsa-445c-vh5m-36rj, CVE-2026-34479...

CLEANSTART-2026-XN43320 Security fixes in strimzi-kafka-operator 0.51.0-r1

Package strimzi-kafka-operator version 0.51.0-r1 fixes 11 vulnerabilities: CVE-2026-2332, CVE-2026-33871, CVE-2026-34477, CVE-2026-34478, CVE-2026-34480...

CLEANSTART-2026-CH37263 Security fixes in kafka 4.0.1-r3

Package kafka version 4.0.1-r3 fixes 7 vulnerabilities: CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142...

CLEANSTART-2026-JJ27428 Security fixes in kafka-ui 1.4.2-r6

Package kafka-ui version 1.4.2-r6 fixes 46 vulnerabilities: CVE-2026-40973, CVE-2026-42579, CVE-2026-42583, CVE-2026-42584, CVE-2026-42585...

CLEANSTART-2026-EV74091 Security fixes in kafka-fips 4.0.1-r3

Package kafka-fips version 4.0.1-r3 fixes 7 vulnerabilities: CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142...

CLEANSTART-2026-CK09213 Security fixes in kafka-fips 3.8.1-r10

Package kafka-fips version 3.8.1-r10 fixes 8 vulnerabilities: ghsa-445c-vh5m-36rj, ghsa-3pxv-7cmr-fjr4, ghsa-6hg6-v5c8-fphq, ghsa-355h-qmc2-wpwf, CVE-2026-34477...

CLEANSTART-2026-AU09596 Security fixes in confluent-kafka 8.2.0-r0

Package confluent-kafka version 8.2.0-r0 fixes 7 vulnerabilities: CVE-2026-34477, CVE-2026-34478, CVE-2026-34479, CVE-2026-34480, CVE-2026-2332...

CVE-2026-10050 vulnerabilities

Vulnerabilities for packages: akhq, confluent-kafka, solr, apache-tika, tez, neo4j...

CVE-2026-10051 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, akhq, confluent-kafka, solr, neo4j...

CVE-2026-6790 vulnerabilities

Vulnerabilities for packages: akhq, confluent-kafka, neo4j, solr...

GHSA-7P3P-8QV8-M2VH vulnerabilities

Vulnerabilities for packages: akhq, confluent-kafka, neo4j, solr...

GHSA-W7X5-G22V-XQHR vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, akhq, confluent-kafka, solr, neo4j...

CVE-2026-8384 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, akhq, confluent-kafka, solr, neo4j...

GHSA-2FVJ-HGJ9-J2GR vulnerabilities

Vulnerabilities for packages: akhq, confluent-kafka, solr, apache-tika, tez, neo4j...

GHSA-F4V5-65JJ-PCR2 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, akhq, confluent-kafka, solr, neo4j...

Kafka UI 0.7.1 Command Injection

An issue discovered in provectus kafka-ui 0.4.0 through 0.7.1 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/topic/messages. id: CVE-2023-52251 info: name: Kafka UI 0.7.1 Command Injection author: yhy0,iamnoooob severity: high description: | An...