kafka-4.2-fips-libs

Direct Vulnerabilities

Known vulnerabilities in the kafka-4.2-fips-libs package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Uncontrolled Memory Allocation	<4.2.2-r0
L Uncontrolled Memory Allocation	<4.2.2-r0
L Server-Side Request Forgery (SSRF)	<4.2.2-r0
L CVE-2026-83557	<4.2.2-r0
L CVE-2026-68497	<4.2.2-r0
L CVE-2026-19032	<4.2.2-r0
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<4.2.2-r0
L Incorrect Authorization	<4.2.2-r0
L Incorrect Authorization	<4.2.2-r0
L Use of Non-Canonical URL Paths for Authorization Decisions	<4.2.2-r0
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<4.2.2-r0
L Improper Encoding or Escaping of Output	<4.2.2-r0
L NULL Pointer Dereference	<4.2.2-r0
L Inefficient Regular Expression Complexity	<4.2.2-r0
L Information Exposure	<4.2.2-r0
L Incorrect Authorization	<4.2.2-r0
L Inefficient Regular Expression Complexity	<4.2.2-r0
L CVE-2026-68494	<4.2.2-r0
L GHSA-mhm7-754m-9p8w	<4.2.2-r0
L Inefficient Regular Expression Complexity	<4.2.2-r0
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<4.2.2-r0
L Improper Input Validation	<4.2.2-r0
L Server-Side Request Forgery (SSRF)	<4.2.2-r0
C Improper Handling of Alternate Encoding	<4.2.2-r0
L Incomplete Blacklist	<4.2.2-r0
L Incomplete Blacklist	<4.2.2-r0
L Resource Exhaustion	<4.2.2-r0
L Resource Exhaustion	<4.2.2-r0
C HTTP Request Smuggling	<4.2.1-r0
L Resource Exhaustion	<4.2.1-r0
H Improper Encoding or Escaping of Output	<4.2.1-r0
H CVE-2025-67030	<4.2.1-r0
L GHSA-72hv-8253-57qq	<4.2.1-r0
M Improper Validation of Certificate with Host Mismatch	<4.2.1-r0
H Improper Output Neutralization for Logs	<4.2.1-r0
H Improper Encoding or Escaping of Output	<4.2.1-r0
M Improper Input Validation	<4.2.1-r0

Vulnerability

Vulnerable Version

Uncontrolled Memory Allocation

<4.2.2-r0