Aller au contenu

Vulnérabilités de Red Hat streams for Apache Kafka 2

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-118952 A flaw was found in the Kroxylicious ACL authorizer 6.5 Moyenne 30 oct. 2026
CVE-2026-105949 Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a… 8.8 Élevée 20 oct. 2026
CVE-2026-105312 A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an… 9.9 Critique 20 oct. 2026
CVE-2026-105311 The StreamsHub Console operator acts as a confused deputy: a Kubernetes tenant with permission to create a Console… 7.7 Élevée 20 oct. 2026
CVE-2026-96740 A flaw was found in the StreamsHub Console for Apache Kafka 6.5 Moyenne 28 sept. 2026
CVE-2026-55225 Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations 8.0 Élevée 15 sept. 2026
CVE-2026-57915 It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized… Non notée 26 juin 2026
CVE-2026-54513 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor 8.1 Élevée 23 juin 2026
CVE-2026-50559 Quarkus is a Java framework for building cloud-native applications 7.5 Élevée 19 juin 2026
CVE-2026-50010 Netty is a network application framework for development of protocol servers and clients 7.5 Élevée 12 juin 2026
CVE-2026-48059 Netty is a network application framework for development of protocol servers and clients 8.7 Élevée 12 juin 2026
CVE-2026-48043 Netty is a network application framework for development of protocol servers and clients 5.3 Moyenne 12 juin 2026
CVE-2026-47691 Netty is a network application framework for development of protocol servers and clients 8.7 Élevée 12 juin 2026
CVE-2026-45674 Netty is a network application framework for development of protocol servers and clients 8.7 Élevée 12 juin 2026
CVE-2026-45416 Netty is a network application framework for development of protocol servers and clients 7.5 Élevée 12 juin 2026
CVE-2026-44893 Netty is a network application framework for development of protocol servers and clients 7.5 Élevée 12 juin 2026
CVE-2026-44249 Netty is a network application framework for development of protocol servers and clients 8.1 Élevée 11 juin 2026
CVE-2026-40984 In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service… 7.5 Élevée 9 juin 2026
CVE-2026-40983 In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service… 7.5 Élevée 9 juin 2026
CVE-2026-27145 (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name… 6.5 Moyenne 2 juin 2026
CVE-2026-42587 Netty is an asynchronous, event-driven network application framework 7.5 Élevée 13 mai 2026
CVE-2026-42584 Netty is an asynchronous, event-driven network application framework 7.3 Élevée 13 mai 2026
CVE-2026-42579 Netty is an asynchronous, event-driven network application framework 7.5 Élevée 13 mai 2026
CVE-2026-42578 Netty is an asynchronous, event-driven network application framework 2.9 Faible 13 mai 2026
CVE-2026-42581 Netty is an asynchronous, event-driven network application framework 5.8 Moyenne 13 mai 2026

Autres produits Red Hat