strimzi-kafka-operator-0.45-kafka-base

Direct Vulnerabilities

Known vulnerabilities in the strimzi-kafka-operator-0.45-kafka-base package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
M Allocation of Resources Without Limits or Throttling	*
L Resource Exhaustion	*
L HTTP Request Smuggling	*
L HTTP Request Smuggling	*
L Missing Release of Resource after Effective Lifetime	*
L Resource Exhaustion	*
L HTTP Request Smuggling	*
L Improper Input Validation	*
L Integer Overflow or Wraparound	*
L HTTP Response Splitting	*
L CRLF Injection	*
L Information Exposure Through Server Log Files	<0.45.2-r3
C HTTP Request Smuggling	*
M Improper Validation of Certificate with Host Mismatch	*
H Improper Output Neutralization for Logs	*
L Race Condition	<0.45.2-r4
H Improper Encoding or Escaping of Output	*
L HTTP Request Smuggling	<0.45.2-r3
H Allocation of Resources Without Limits or Throttling	<0.45.2-r3
L CVE-2025-48734	*
H Improper Certificate Validation	<0.45.2-r3
H Information Exposure Through Log Files	<0.45.2-r3
M Improper Input Validation	<0.45.2-r3
L GHSA-72hv-8253-57qq	<0.45.2-r0
M HTTP Request Smuggling	<0.45.2-r0
L CVE-2024-13009	<0.45.2-r0
M Resource Exhaustion	<0.45.2-r4
L CVE-2023-51775	<0.45.2-r0
M Improper Certificate Validation	<0.45.2-r0
L CVE-2024-56128	<0.45.2-r0
L Incorrect Authorization	<0.45.2-r0
L Missing Authorization	<0.45.2-r0
L Deserialization of Untrusted Data	<0.45.2-r0
H Improper Handling of Highly Compressed Data (Data Amplification)	<0.45.2-r4
M CVE-2024-6763	*
H Allocation of Resources Without Limits or Throttling	<0.45.2-r4
H CVE-2023-52428	<0.45.2-r0
L CVE-2025-24970	<0.45.2-r0
L Uncontrolled Recursion	*
H HTTP Request Smuggling	<0.45.2-r4
L Uncontrolled Recursion	<0.45.2-r0
L CVE-2025-27817	<0.45.2-r0
L Resource Exhaustion	<0.45.2-r4
M Cross-site Scripting (XSS)	<0.45.2-r4
L CRLF Injection	<0.45.2-r3
L Resource Exhaustion	<0.45.2-r5
L Improper Privilege Management	<0.45.2-r0
H Files or Directories Accessible to External Parties	<0.45.2-r4
L CVE-2024-29371	<0.45.2-r4
M Allocation of Resources Without Limits or Throttling	<0.45.2-r0

strimzi-kafka-operator-0.45-kafka-base

Direct Vulnerabilities

Fix vulnerabilities automatically