TI-2025-20589 CVE-2025-27817 · GHSA-vgq5-3255-v292
Apache Kafka Client: Arbitrary file read and SSRF vulnerability
Priority HIGH 76
A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client.
RHSA-2025:23417
Streams for Apache Kafka 3.1.0 release and security update
Released 2025-12-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Streams for Apache Kafka 3.1.0
Fixes 12 records
TI-2025-10971 CVE-2025-11965 · GHSA-h5fg-jpgr-rv9c
In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], a StaticHandler…
Priority HIGH 67
In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], a StaticHandler configuration for restricting access to hidden files fails to restrict access to hidden directories, allowing unauthorized users to retrieve…
TI-2025-35900 CVE-2025-58057 · GHSA-3p8m-j85q-pgmj
Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack
Priority MEDIUM 64
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.
TI-2025-10972 CVE-2025-11966 · GHSA-45p5-v273-3qqr
Cross-site scripting in Eclipse Foundation Vert.x
Priority MEDIUM 45
In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], when "directory listing" is enabled, file and directory names are inserted into generated HTML without proper escaping in the href, title, and link attribute…
TI-2025-34845 CVE-2025-55163 · GHSA-prj3-ccx8-p6x4
Netty MadeYouReset HTTP/2 DDoS Vulnerability
Priority MEDIUM 44
Netty is an asynchronous, event-driven network application framework.
TI-2025-20590 CVE-2025-27818 · GHSA-76qp-h5mr-frr4
Apache Kafka: Possible RCE attack via SASL JAAS LdapLoginModule configuration
Priority MEDIUM 42
A possible security vulnerability has been identified in Apache Kafka.
TI-2025-20591 CVE-2025-27819 · GHSA-mcwh-c9pg-xw43
Apache Kafka: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration
Priority MEDIUM 41
In CVE-2023-25194, we announced the RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration in Kafka Connect API.
TI-2025-01403 CVE-2025-1634 · GHSA-4fwr-mh5q-hchh
Io.quarkus:quarkus-resteasy: memory leak in quarkus resteasy classic when client requests timeout
Priority MEDIUM 41
A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made.
TI-2025-31064 CVE-2025-48924 · GHSA-j288-q9x7-2f5v
Apache Commons Lang, Apache Commons Lang: ClassUtils.getClass(...) can throw a StackOverflowError on very long inputs
Priority LOW 35
Uncontrolled Recursion vulnerability in Apache Commons Lang.
TI-2025-31587 CVE-2025-49574 · GHSA-9623-mj7j-p9v4
Quarkus potential data leak when duplicating a duplicated context
Priority LOW 30
Quarkus is a Cloud Native, (Linux) Container First framework for writing Java applications.
TI-2024-37123 CVE-2024-56128 · GHSA-p7c9-8xx8-h74f
Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption
Priority LOW 26
Incorrect Implementation of Authentication Algorithm in Apache Kafka's SCRAM implementation.
TI-2025-35899 CVE-2025-58056 · GHSA-fghv-69vj-qj49
Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions
Priority LOW 16
Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients.