Vulnérabilités de Red Hat streams for Apache Kafka 3

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-118952	A flaw was found in the Kroxylicious ACL authorizer	6.5 Moyenne	30 oct. 2026
CVE-2026-105941	The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserialized EDEK bytes…	8.1 Élevée	20 oct. 2026
CVE-2026-105949	Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a…	8.8 Élevée	20 oct. 2026
CVE-2026-105312	A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an…	9.9 Critique	20 oct. 2026
CVE-2026-105311	The StreamsHub Console operator acts as a confused deputy: a Kubernetes tenant with permission to create a Console…	7.7 Élevée	20 oct. 2026
CVE-2026-96740	A flaw was found in the StreamsHub Console for Apache Kafka	6.5 Moyenne	28 sept. 2026
CVE-2026-57915	It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized…	Non notée	26 juin 2026
CVE-2026-54513	jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor	8.1 Élevée	23 juin 2026
CVE-2026-50559	Quarkus is a Java framework for building cloud-native applications	7.5 Élevée	19 juin 2026
CVE-2026-50010	Netty is a network application framework for development of protocol servers and clients	7.5 Élevée	12 juin 2026
CVE-2026-48059	Netty is a network application framework for development of protocol servers and clients	8.7 Élevée	12 juin 2026
CVE-2026-48043	Netty is a network application framework for development of protocol servers and clients	5.3 Moyenne	12 juin 2026
CVE-2026-47691	Netty is a network application framework for development of protocol servers and clients	8.7 Élevée	12 juin 2026
CVE-2026-45674	Netty is a network application framework for development of protocol servers and clients	8.7 Élevée	12 juin 2026
CVE-2026-45416	Netty is a network application framework for development of protocol servers and clients	7.5 Élevée	12 juin 2026
CVE-2026-44893	Netty is a network application framework for development of protocol servers and clients	7.5 Élevée	12 juin 2026
CVE-2026-44249	Netty is a network application framework for development of protocol servers and clients	8.1 Élevée	11 juin 2026
CVE-2026-40984	In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service…	7.5 Élevée	9 juin 2026
CVE-2026-40983	In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service…	7.5 Élevée	9 juin 2026
CVE-2026-27145	(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…	6.5 Moyenne	2 juin 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critique	22 mai 2026
CVE-2026-42587	Netty is an asynchronous, event-driven network application framework	7.5 Élevée	13 mai 2026
CVE-2026-42584	Netty is an asynchronous, event-driven network application framework	7.3 Élevée	13 mai 2026
CVE-2026-42579	Netty is an asynchronous, event-driven network application framework	7.5 Élevée	13 mai 2026
CVE-2026-42578	Netty is an asynchronous, event-driven network application framework	2.9 Faible	13 mai 2026

Autres produits Red Hat