Skip to content
OpenAdvisories

Package · Maven

org.apache.kafka:kafka-clients

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2026-35554

    Apache Kafka Clients: Kafka Producer Message Corruption and Misrouting via Buffer Pool Race Condition

    A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics. When a produce batch expires due to delivery.timeout.ms while a network request containing that batch is still …

    Apache Software Foundation Apache Kafka Clients druid thingsboard-tb-node Wolfi Maven
  • High 7.5
    CVE-2025-27817 Public exploit Scanner template EPSS 70%

    Apache Kafka Client: Arbitrary file read and SSRF vulnerability

    A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. Apache Kafka Clients accept configuration data for setting the SASL/OAUTHBEARER connection with the brokers, including "sasl.oauthbearer.token.endpoint.url" and …

    Apache Software Foundation Apache Kafka Client druid thingsboard-tb-node Wolfi Maven