search

vert-x3 / vertx-kafka-client

Reactive Kafka Client for Vert.x
Apache License 2.0
84 stars 82 forks source link

Upgrade Kafka from 3.0.0 to 3.0.2 fixing CVE-2022-34917 #229

Closed julianladisch closed 1 year ago

julianladisch commented 1 year ago

Unauthenticated Kafka clients may cause OutOfMemoryError on Kafka brokers: https://kafka.apache.org/cve-list#CVE-2022-34917 https://nvd.nist.gov/vuln/detail/CVE-2022-34917

Upgrading Kafka from 3.0.0 to 3.0.2 fixes this vulnerability.