Known Vulnerabilities in Apache Kafka




SSRF in Apache Kafka Client03 Jul, 2025
High Patched Public exploit
Incorrect authorization in Apache Kafka02 Aug, 2024
Medium Patched
Deserialization of untrused data in Apache Kafka Connect11 Feb, 2023
Low Patched Public exploit
Denial of service in Apache Kafka20 Sep, 2022
Medium Patched
Timing attack in Apache Kafka21 Sep, 2021
Low Patched
Information disclosure in Apache Kafka14 Jan, 2020
Low Patched
Apache Kafka update for jackson-databind02 Dec, 2019
High Patched
Denial of service in Apache Kafka11 Jun, 2019
Low Patched
Session hijacking in Apache Kafka31 Jul, 2018
Low Patched