org.apache.camel.kafkaconnector:camel-azure-storage-datalake-sink-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:camel-azure-storage-datalake-source-kafka-connector (4.18.0) +5 more potentially affected by CVE-2026-60093 via org.apache.camel:camel-azure-storage-datalake (>=4.15.0, <=4.18.3)

org.apache.camel:camel-azure-storage-datalake MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.3 Source cves: CVE-2026-60093 Source advisory: OSV:GHSA-7JWC-Q3FJ-C9PQ...

CVE-2026-76403

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos authentication is used with Hypertext Transfer Protocol HTTP Event Collector in Splunk Enterprise. The vulnerability...

CVE-2026-76400

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer REST API and influence responses from a Hypertext Transfer Protocol HTTP Event Collector endpoint in Splunk Enterprise could cause the connector to retry faile...

org.apache.camel.kafkaconnector:camel-couchbase-sink-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:itests-couchbase (4.18.0) +4 more potentially affected by CVE-2026-46587 via org.apache.camel:camel-couchbase (>=4.15.0, <=4.18.2)

org.apache.camel:camel-couchbase MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-46587 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17822328...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (>=4.14.0, <=4.14.5), org.apache.camel.kafkaconnector:camel-netty-kafka-connector (>=4.14.0, <=4.14.5) +26 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-netty (>=4.14.0, <=4.14.7)

org.apache.camel:camel-netty MAVEN version =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.0, =4.14.5, =3.26.0, =3.26.0, =3.26.0, =3.26.0, =3.26.0, =3.26.0, =3.26.0, =3.27.4 and more Source cves: CVE-2026-42527https://vulners.com/cve/C...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:itests-netty-http (4.18.0) +6 more potentially affected by CVE-2026-56139 via org.apache.camel:camel-netty-http (>=4.15.0, <=4.18.2)

org.apache.camel:camel-netty-http MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-56139 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17874453...

io.github.ncasaux:camel-plantuml (>=1.6.0, <=1.8.0), io.github.ncasaux:camel-plantuml-jar (>=1.6.0, <=1.8.0) +12 more potentially affected by CVE-2026-56139 via org.apache.camel:camel-netty-http (>=4.0.0, <=4.14.7)

org.apache.camel:camel-netty-http MAVEN version =4.0.0, =1.6.0, =1.6.0, =1.6.0, =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-56139 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17874453...

org.apache.camel.kafkaconnector:camel-couchbase-sink-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:itests-couchbase (4.18.0) +4 more potentially affected by CVE-2026-46587 via org.apache.camel:camel-couchbase (>=4.15.0, <=4.18.2)

org.apache.camel:camel-couchbase MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-46587 Source advisory: MEND:CVE-2026-46587...

org.apache.camel.kafkaconnector:camel-netty-http-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:itests-netty-http (4.18.0) +6 more potentially affected by CVE-2026-42527 via org.apache.camel:camel-netty-http (>=4.18.0, <=4.18.2)

org.apache.camel:camel-netty-http MAVEN version =4.18.0, =4.18.1, =3.32.0, =3.32.0, =3.32.0, =3.32.0, =4.18.0, =4.18.2 Source cves: CVE-2026-42527 Source advisory: OSV:GHSA-8H6P-JVHF-9HCR...

org.apache.camel.kafkaconnector:camel-nats-sink-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:camel-nats-source-kafka-connector (4.18.0) +5 more potentially affected by CVE-2026-46457 via org.apache.camel:camel-nats (>=4.15.0, <=4.18.2)

org.apache.camel:camel-nats MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-46457 Source advisory: GHSA-7V55-Q9X3-83CJ...

org.apache.camel.kafkaconnector:camel-nats-sink-kafka-connector (>=4.0.0, <=4.14.5), org.apache.camel.kafkaconnector:camel-nats-source-kafka-connector (>=4.0.0, <=4.14.5) +5 more potentially affected by CVE-2026-46457 via org.apache.camel:camel-nats (>=4.0.0, <=4.14.7)

org.apache.camel:camel-nats MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.14.7 Source cves: CVE-2026-46457 Source advisory: OSV:GHSA-7V55-Q9X3-83CJ...

org.apache.camel.kafkaconnector:camel-servicenow-kafka-connector (0.1.0), org.apache.camel.maven:camel-servicenow-maven-plugin (>=2.25.0, <=3.1.0) +15 more potentially affected by CVE-2026-50634 via org.apache.cxf:cxf-rt-rs-security-jose-jaxrs (3.3.5)

org.apache.cxf:cxf-rt-rs-security-jose-jaxrs MAVEN version 3.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-jose-jaxrs and may be impacted: - org.apache.camel.kafkaconnector:camel-servicenow-kafka-connector 0.1.0 ...

org.apache.camel.kafkaconnector:camel-servicenow-kafka-connector (0.1.0), org.apache.camel.maven:camel-servicenow-maven-plugin (>=2.25.0, <=3.1.0) +14 more potentially affected by CVE-2026-50623 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.3.5)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.camel.kafkaconnector:camel-servicenow-kafka-connector 0.1.0 -...

org.apache.camel.kafkaconnector:camel-google-pubsub-sink-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:camel-google-pubsub-source-kafka-connector (4.18.0) +8 more potentially affected by CVE-2025-27636 +1 more via org.apache.camel:camel-google-pubsub (>=4.15.0, <=4.18.1)

org.apache.camel:camel-google-pubsub MAVEN version =4.15.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.1 Source cves: CVE-2025-27636, CVE-2026-40453 Source advisory: GHSA-JG2M-9X48-3GVJ...

org.apache.camel.kafkaconnector:camel-google-pubsub-kafka-connector (>=0.1.0, <=0.11.5), org.apache.camel.kafkaconnector:camel-google-pubsub-sink-kafka-connector (>=1.0.0, <=4.14.5) +13 more potentially affected by CVE-2025-27636 +1 more via org.apache.camel:camel-google-pubsub (>=3.0.0, <=4.14.5)

org.apache.camel:camel-google-pubsub MAVEN version =3.0.0, =0.1.0, =1.0.0, =1.0.0, =3.19.0, =4.8.0, =0.9.0, =4.7.0, =4.7.0, =1.0.0-m6, =1.0.0-m6, =1.0.0-m6, =1.5.0, =3.0.0, =0.1.9, =0.1.6, =2025.1...

org.apache.camel.kafkaconnector:camel-coap-kafka-connector (>=0.1.0, <=0.11.5), org.apache.camel.kafkaconnector:camel-coap-tcp-kafka-connector (>=0.1.0, <=0.11.5) +8 more potentially affected by CVE-2026-40453 via org.apache.camel:camel-coap (>=3.0.0, <=4.14.5)

org.apache.camel:camel-coap MAVEN version =3.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =4.7.0, =1.1.0, =1.1.0, =1.1.0, =2.3.0, =3.0.0, =4.14.5 Source cves: CVE-2026-40453 Source advisory: MEND:CVE-2026-40453...

Apache Pulsar IO Kafka Connector Registration Information Disclosure

The vulnerability of the Apache Pulsar IO Kafka Connector and the Apache Pulsar IO Kafka Connect Adapter software is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Apache Pulsar Kafka Connector Logs Sensitive Information in Application Logs

Apache Pulsar contains multiple connectors for integrating with Apache Kafka. The Pulsar IO Apache Kafka Source Connector, Sink Connector, and Kafka Connect Adaptor Sink Connector log sensitive configuration properties in plain text in application logs. This vulnerability can lead to unintended...

CVE-2025-30677 Apache Pulsar IO Kafka Connector, Apache Pulsar IO Kafka Connect Adaptor: Sensitive information logged in Pulsar's Apache Kafka Connectors

Apache Pulsar contains multiple connectors for integrating with Apache Kafka. The Pulsar IO Apache Kafka Source Connector, Sink Connector, and Kafka Connect Adaptor Sink Connector log sensitive configuration properties in plain text in application logs. This vulnerability can lead to unintended...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in snappy-java

Summary Multiple vulnerabilities in snappy-java used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2023-34455 DESCRIPTION: snappy-java is vulnerable to a denial of service, caused by the use of an unchecked chunk length in the hasNextChunk function. By sendi...