- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 4 · 1 critical, 2 high, 1 medium
- Dependents
- 0
- Registry
- Maven Central
Advisories 4
- CVE-2026-55225High 8.0
Strimzi: Cross-namespace privilege escalation via `Kafka.spec.entityOperator`
Affected: fixed in 1.0.1.
- CVE-2026-55226Medium 5.4
Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operator
Affected: fixed in 1.0.1.
- CVE-2025-66623High 7.4
Strimzi allows unrestricted access to all Secrets in the same Kubernetes namespace from Kafka Connect and MirrorMaker 2 operands
Affected: from 0.47.0, fixed in 0.49.1.
- CVE-2024-36543Critical 9.8
Incorrect access control in the Kafka Connect REST API in the STRIMZI Project 0.41.0 and earlier allows an attacker to deny the service…
Affected: through 0.41.0.