strimzi-kafka-operator

3 results · Clear filters · Feed

• High 8.2
  CVE-2025-55163 Public exploit

  Netty MadeYouReset HTTP/2 DDoS Vulnerability

  Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty is vulnerable to MadeYouReset DDoS. This is a logical vulnerability in the HTTP/2 protocol, that uses malformed HTTP/2 control frames …

  netty netty druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  Aug 13, 2025
• High 7.5
  CVE-2025-27817 Public exploit Scanner template EPSS 70%

  Apache Kafka Client: Arbitrary file read and SSRF vulnerability

  A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. Apache Kafka Clients accept configuration data for setting the SASL/OAUTHBEARER connection with the brokers, including "sasl.oauthbearer.token.endpoint.url" and …

  Apache Software Foundation Apache Kafka Client druid thingsboard-tb-node Wolfi Maven
  Jun 10, 2025
• High 8.8
  CVE-2025-48734 Public exploit

  Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

  Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers from using the declared class property of Java enum objects to get access to the classloader. However this…

  Apache Software Foundation Apache Commons BeanUtils 2.x Apache Commons BeanUtils 1.x druid Debian Ubuntu Azure Linux Wolfi Maven
  May 28, 2025