org.apache.kafka:kafka-clients vulnerabilities

4.1.0

11 years ago

2 months ago

Direct Vulnerabilities

Known vulnerabilities in the org.apache.kafka:kafka-clients package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
H Deserialization of Untrusted Data	[2.3.0,3.9.1)
H Deserialization of Untrusted Data	[2.0.0,3.9.1)
H Server-side Request Forgery (SSRF)	[3.1.0,3.9.1)
H Incorrect Implementation of Authentication Algorithm	[0.10.2.0,3.7.2)[3.8.0,3.8.1)
M Files or Directories Accessible to External Parties	[2.3.0,3.8.0)
M Deserialization of Untrusted Data	[2.3.0,3.4.0)
M Timing Attack	[2.8.0,2.8.1)[,2.7.2)
M Access Restriction Bypass	[0.11.0.0,2.1.1)
L Insufficient Entropy	[2.1.0,2.1.1)

76 VERSIONS IN TOTAL See all versions