Vulnerabilities of Red Hat Streams for Apache Kafka 2.9.4

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-50559	Quarkus is a Java framework for building cloud-native applications	7.5 High	Jun 19, 2026
CVE-2026-50010	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-48059	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-48043	Netty is a network application framework for development of protocol servers and clients	5.3 Medium	Jun 12, 2026
CVE-2026-47691	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-45674	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-45416	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-44893	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-44249	Netty is a network application framework for development of protocol servers and clients	8.1 High	Jun 11, 2026
CVE-2026-42587	Netty is an asynchronous, event-driven network application framework	7.5 High	May 13, 2026
CVE-2026-45109	Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes	7.5 High	May 13, 2026
CVE-2026-44579	Next.js is a React framework for building full-stack web applications	7.5 High	May 13, 2026
CVE-2026-44578	Next.js is a React framework for building full-stack web applications	8.6 High	May 13, 2026
CVE-2026-44577	Next.js is a React framework for building full-stack web applications	5.9 Medium	May 13, 2026
CVE-2026-44574	Next.js is a React framework for building full-stack web applications	8.1 High	May 13, 2026
CVE-2026-44575	Next.js is a React framework for building full-stack web applications	7.5 High	May 13, 2026
CVE-2026-44573	Next.js is a React framework for building full-stack web applications	7.5 High	May 13, 2026
CVE-2026-39852	Quarkus is a Java framework for building cloud-native applications	8.8 High	May 5, 2026
CVE-2026-42044	Axios is a promise based HTTP client for the browser and Node.js	6.5 Medium	Apr 24, 2026
CVE-2026-4800	The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same…	8.1 High	Mar 31, 2026
CVE-2026-33871	Netty is an asynchronous, event-driven network application framework	8.7 High	Mar 27, 2026
CVE-2026-33870	Netty is an asynchronous, event-driven network application framework	7.5 High	Mar 27, 2026
CVE-2026-24308	Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an…	Not rated	Mar 7, 2026
CVE-2026-24281	Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails,…	Not rated	Mar 7, 2026
CVE-2026-23864	Multiple denial of service vulnerabilities exist in React Server Components, affecting the following packages:…	7.5 High	Jan 26, 2026

Other Red Hat products