Vulnerabilities of Red Hat Red Hat build of Debezium 2

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-33557	A possible security vulnerability has been identified in Apache Kafka	Not rated	Apr 20, 2026
CVE-2026-5598	Covert timing channel vulnerability in Legion of the Bouncy Castle Inc	8.9 High	Apr 15, 2026
CVE-2026-2332	In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to…	7.4 High	Apr 14, 2026
CVE-2026-33871	Netty is an asynchronous, event-driven network application framework	8.7 High	Mar 27, 2026
CVE-2026-24308	Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an…	Not rated	Mar 7, 2026
CVE-2026-24281	Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails,…	Not rated	Mar 7, 2026
CVE-2026-1605	In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed…	7.5 High	Mar 5, 2026
CVE-2026-27830	c3p0, a JDBC Connection pooling library, is vulnerable to attack via maliciously crafted Java-serialized objects and…	8.9 High	Feb 26, 2026
CVE-2026-27727	mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI…	8.9 High	Feb 25, 2026
CVE-2025-70974	Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key…	10.0 Critical	Jan 9, 2026
CVE-2023-5236	A flaw was found in Infinispan, which does not detect circular object references when unmarshalling	4.4 Medium	Dec 18, 2023

Other Red Hat products