org.apache.kafka:kafka-clients vulnerabilities

4.0.0

10 years ago

5 months ago

Direct Vulnerabilities

Known vulnerabilities in the org.apache.kafka:kafka-clients package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
H Deserialization of Untrusted Data	[2.3.0,3.9.1)
H Deserialization of Untrusted Data	[2.0.0,3.9.1)
H Server-side Request Forgery (SSRF)	[3.1.0,3.9.1)
H Incorrect Implementation of Authentication Algorithm	[0.10.2.0,3.7.2)[3.8.0,3.8.1)
M Files or Directories Accessible to External Parties	[2.3.0,3.8.0)
M Deserialization of Untrusted Data	[2.3.0,3.4.0)
M Timing Attack	[2.8.0,2.8.1)[,2.7.2)
M Access Restriction Bypass	[0.11.0.0,2.1.1)
L Insufficient Entropy	[2.1.0,2.1.1)

74 VERSIONS IN TOTAL