Apache Kafka Clients (Apache Software Foundation) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2026-04-20. Vendor: Apache Software Foundation.

CVEs of Apache Kafka Clients

• CVE-2026-33558 - CVSS 5.3 (medium), 2026-04-20: Information exposure vulnerability has been identified in Apache Kafka. The NetworkClient component will output entire requests and responses information in…
• CVE-2026-35554 - CVSS 8.7 (high), 2026-04-07: A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics. When a…
• CVE-2024-31141 - CVSS 6.5 (medium), 2024-11-19: Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients. Apache Kafka Clients accept…