Known vulnerabilities in Red Hat streams for Apache Kafka

Is your version affected?

CVE	Summary	Score	Published
CVE-2024-4027	Undertow: outofmemoryerror in httpservletrequestimpl.getparameternames() can cause remote dos attacks	7.5 High	Jan 30, 2026
CVE-2024-3884	Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded	High	Dec 3, 2025
CVE-2024-12397	Io.quarkus.http/quarkus-http-core: quarkus http cookie smuggling	7.4 High	Dec 12, 2024
CVE-2023-1932	A flaw was found in hibernate-validator's 'isValid' method in the…	6.1 Medium	Nov 7, 2024
CVE-2024-8285	A flaw was found in Kroxylicious	5.9 Medium	Aug 30, 2024
CVE-2024-3653	Undertow: learningpushhandler can lead to remote memory dos attacks	5.3 Medium	Jul 8, 2024
CVE-2024-1249	Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos	7.4 High	Apr 17, 2024
CVE-2024-1635	Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol	7.5 High	Feb 19, 2024