CLEANSTART-2026-WW31009 Security fixes in kafka-ui 1.2.0-r1

Package kafka-ui version 1.2.0-r1 fixes 16 vulnerabilities: ghsa-9pp5-9c7g-4r83, ghsa-8v5q-rhf3-jphm, ghsa-mg83-c7gq-rv5c, ghsa-hh3m-g4qj-4835, ghsa-jmp9-x22r-554x...

UI for Apache Kafka 安全漏洞

UI for Apache Kafka is an open source front-end interface for Kafka by Provectus. A security vulnerability exists in UI for Apache Kafka versions v0.6.0 through v0.7.2, which stems from improper validation of inputs to the component /kafka/ui/serdes/CustomSerdeLoader.java, which could lead to the...

PT-2025-42165

Improper input validation in the component /kafka/ui/serdes/CustomSerdeLoader.java of kafka-ui v0.6.0 to v0.7.2 allows attackers to execute arbitrary code via supplying crafted data...

CVE-2025-60536

The kafka-ui software, from versions v0.6.0 to v0.7.2 , is vulnerable to a Denial of Service (DoS) attack. The root cause is an issue in the Configure New Cluster interface that allows an attacker to trigger uncontrolled resource consumption by uploading a crafted configuration file . To remediat...

CVE-2025-60537

Improper input validation in the component /kafka/ui/serdes/CustomSerdeLoader.java of kafka-ui v0.6.0 to v0.7.2 allows attackers to execute arbitrary code via supplying crafted data...