Skip to content
OpenAdvisories

Package · Wolfi

kafka-4.2

36 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-106449

    yawkat LZ4 Java: LZ4BlockInputStream with stopOnEmptyBlock=false recurses once per empty block, causing StackOverflowError

    yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4BlockInputStream configured with stopOnEmptyBlock set to false handles each well-formed empty LZ4Block by recursively calling refill(), allowing a long sequence of empty bl…

    yawkat lz4-java druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  • Low 3.7
    CVE-2025-11143

    org.eclipse.jetty:jetty-http has different parsing of invalid URIs

    The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Differential parsing of URIs in systems using multiple components may result in security by-pass. For example a component that enforces a black list…

    Eclipse Foundation Eclipse Jetty druid trino Debian Ubuntu Wolfi Maven