📦 Kafka

This CVE describes a Java deserialization vulnerability in Apache Kafka Connect that allows authenticated operators with configuration privileges to execute arbitrary code via LDAP login module manipu...

During Apache Kafka migration from ZooKeeper to KRaft mode, ACL enforcement can fail when removing an ACL from a resource with multiple ACLs, causing Kafka to incorrectly treat the resource as having ...