{"schemaVersion":3,"id":"CVE-2026-33558","aliases":["UBUNTU-CVE-2026-33558","CGA-2224-223c-rxcx","CGA-3928-cfqf-wr22","CGA-3r3h-9w88-h4gr","CGA-499r-pcx5-74rc","CGA-49jc-2qwj-r545","CGA-4f24-g77v-jgrq","CGA-4jfh-88mr-4fm3","CGA-58cj-mfhf-phcq","CGA-5r2p-285r-vgv2","CGA-6c44-9q7f-pfj2","CGA-6w2r-ggpf-mr94","CGA-72hc-6m32-m5f7","CGA-7g78-mf5x-r857","CGA-88f8-2rr6-fc86","CGA-89mx-49mf-jjrx","CGA-8qqm-7h7w-xmm2","CGA-9j38-4q2h-x59h","CGA-c94q-6r8q-g9hw","CGA-gm24-pqj4-9m8w","CGA-gmxr-m55c-43fq","CGA-hpmp-fqq9-c4g6","CGA-jf9h-7hxj-h3f4","CGA-m5h9-xpjc-xgmv","CGA-p8gj-6cjx-pw6m","CGA-q24r-m7vg-f6v6","CGA-q53h-5grv-g42w","CGA-r3j8-j9v9-vqf9","CGA-vc23-gfvj-pg2x","CGA-w677-53j8-q7pc","CGA-wrhh-mhgp-533m","CGA-x24h-m8hp-4c8w","CGA-x9h2-x48r-m5fx","CGA-24hp-jhmm-978q","CGA-2h52-993v-vg98","CGA-2j64-8crm-6qgc","CGA-36jf-cmwx-2wrg","CGA-42gg-cfqx-3g4c","CGA-42jq-93jr-9f8x","CGA-42wx-w5r6-rprc","CGA-45gx-rcpv-m2q6","CGA-5m4f-hh2r-jr9p","CGA-65mq-jx3v-wmg4","CGA-6f3r-qq59-p38p","CGA-7456-wwhx-pfvr","CGA-797x-xmv6-h743","CGA-7rj4-83v6-9c24","CGA-8h2g-ggvg-6v4q","CGA-988c-4r4h-j9p6","CGA-9c89-gp9g-mf7g","CGA-cfvv-jmpr-49rg","CGA-cqcv-vcxg-96gp","CGA-f466-g5q3-6jxp","CGA-fj5f-r86q-jvh7","CGA-fxcg-75cg-7764","CGA-g445-wgrj-4w34","CGA-ghrh-gh49-rj6m","CGA-h7qg-fmrw-4xcw","CGA-j3c3-3m3m-263g","CGA-jj2j-xwc7-j76w","CGA-jw25-c4m5-j49c","CGA-m289-jwf3-vrf9","CGA-m423-jvmq-cq93","CGA-mc2c-q6j9-qjwg","CGA-mwcf-78q3-rcxf","CGA-mxf2-r8m2-c8hc","CGA-pfmw-r7hh-4fhq","GHSA-wf66-mphr-4c4r","BIT-kafka-2026-33558","CGA-qqcc-c4pq-96pm","CGA-r6j5-7v5p-32c2","CGA-r78c-3mch-p8jp","CGA-v5ph-2w5q-962m","CGA-vj99-645f-px22","CGA-vmp8-v9xw-2mr5","CGA-wfcm-43jp-5vfq","CGA-xxvv-xf94-9x2j"],"status":"published","duplicateOf":null,"title":null,"description":"Information exposure vulnerability has been identified in Apache Kafka.\n\nThe NetworkClient component will output entire requests and responses information in the DEBUG log level in the logs. By default, the log level is set to INFO level. If the DEBUG level is enabled, the sensitive information will be exposed via the requests and responses output log. The entire lists of impacted requests and responses are:\n\n\n  *  AlterConfigsRequest\n\n  *  AlterUserScramCredentialsRequest\n\n  *  ExpireDelegationTokenRequest\n\n  *  IncrementalAlterConfigsRequest\n\n  *  RenewDelegationTokenRequest\n\n  *  SaslAuthenticateRequest\n\n  *  createDelegationTokenResponse\n\n  *  describeDelegationTokenResponse\n\n  *  SaslAuthenticateResponse\n\n\nThis issue affects Apache Kafka: from any version supported the listed API above through v3.9.1, v4.0.0. We advise the Kafka users to upgrade to v3.9.2, v4.0.1, or later to avoid this vulnerability.","dates":{"published":"2026-04-20T13:20:38.059Z","modified":"2026-04-20T14:20:41.640Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Maven","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00889,"percentile":0.58622,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0.259,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.0063},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00889,"percentile":0.58622}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0063,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00889,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00889,"percentile":0.58622}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-533","name":"DEPRECATED: Information Exposure Through Server Log Files","description":"This entry has been deprecated because its abstraction was too low-level.  See CWE-532.","type":"weakness","status":"Deprecated","abstraction":"Variant","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/533.html"}],"affected":[{"vendor":"apache software foundation","product":"apache kafka","name":"Apache Kafka","label":"apache kafka","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 0.11.0, ≤ 3.9.1","noFixRecorded":false,"fixedIn":null},{"text":"4.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 0.11.0, ≤ 3.9.1 | 4.0.0","eol":null,"hubHref":"/vendor/apache_software_foundation/apache_kafka"},{"vendor":"apache software foundation","product":"apache kafka clients","name":"Apache Kafka Clients","label":"apache kafka clients","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 0.11.0, ≤ 3.9.1","noFixRecorded":false,"fixedIn":null},{"text":"4.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 0.11.0, ≤ 3.9.1 | 4.0.0","eol":null,"hubHref":"/vendor/apache_software_foundation/apache_kafka_clients"},{"vendor":"apache","product":"kafka","name":"kafka","label":"kafka","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 0.11.0.0, < 3.9.2","noFixRecorded":false,"fixedIn":null},{"text":"4.0.0","noFixRecorded":false,"fixedIn":null},{"text":"4.0.0:rc0","noFixRecorded":false,"fixedIn":null},{"text":"4.0.0:rc1","noFixRecorded":false,"fixedIn":null},{"text":"4.0.0:rc3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 0.11.0.0, < 3.9.2 | 4.0.0 | 4.0.0:rc0 | 4.0.0:rc1 | 4.0.0:rc3","eol":{"isEol":false,"eolDate":null,"matchMethod":"cpe","cycle":{"name":"4.0","label":"4.0","eolFrom":null,"isLts":false,"isMaintained":true,"latestVersion":"4.0.2"},"product":{"name":"apache-kafka","label":"Apache Kafka","category":"server-app"}},"hubHref":"/vendor/apache/kafka"},{"vendor":"chainguard","product":"automq","name":"automq","label":"automq","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/automq","purlType":"apk","versions":[{"text":"< 1.7.4-r1","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 1.7.4-r1 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"automq-fips","name":"automq-fips","label":"automq-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/automq-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 1.7.4-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 1.7.4-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"druid","name":"druid","label":"druid","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/druid","purlType":"apk","versions":[{"text":"< 36.0.0-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 36.0.0-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hadoop-fips-3.3.6","name":"hadoop-fips-3.3.6","label":"hadoop-fips-3.3.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hadoop-fips-3.3.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hadoop-fips-3.4.2","name":"hadoop-fips-3.4.2","label":"hadoop-fips-3.4.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hadoop-fips-3.4.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kafka_exporter-strimzi-compat","name":"kafka_exporter-strimzi-compat","label":"kafka_exporter-strimzi-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kafka_exporter-strimzi-compat","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kafka-3.7","name":"kafka-3.7","label":"kafka-3.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kafka-3.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kafka-3.8","name":"kafka-3.8","label":"kafka-3.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kafka-3.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kafka-strimzi-compat","name":"kafka-strimzi-compat","label":"kafka-strimzi-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kafka-strimzi-compat","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"knative-kafka-broker-1.18-dispatcher-loom","name":"knative-kafka-broker-1.18-dispatcher-loom","label":"knative-kafka-broker-1.18-dispatcher-loom","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/knative-kafka-broker-1.18-dispatcher-loom","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"knative-kafka-broker-1.18-receiver-loom","name":"knative-kafka-broker-1.18-receiver-loom","label":"knative-kafka-broker-1.18-receiver-loom","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/knative-kafka-broker-1.18-receiver-loom","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"knative-kafka-broker-1.21-dispatcher-loom","name":"knative-kafka-broker-1.21-dispatcher-loom","label":"knative-kafka-broker-1.21-dispatcher-loom","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/knative-kafka-broker-1.21-dispatcher-loom","purlType":"apk","versions":[{"text":"< 1.21.4-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.21.4-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"knative-kafka-broker-1.21-receiver-loom","name":"knative-kafka-broker-1.21-receiver-loom","label":"knative-kafka-broker-1.21-receiver-loom","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/knative-kafka-broker-1.21-receiver-loom","purlType":"apk","versions":[{"text":"< 1.21.4-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.21.4-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"knative-kafka-broker-1.22-dispatcher-loom","name":"knative-kafka-broker-1.22-dispatcher-loom","label":"knative-kafka-broker-1.22-dispatcher-loom","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/knative-kafka-broker-1.22-dispatcher-loom","purlType":"apk","versions":[{"text":"< 1.22.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.22.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"knative-kafka-broker-1.22-receiver-loom","name":"knative-kafka-broker-1.22-receiver-loom","label":"knative-kafka-broker-1.22-receiver-loom","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/knative-kafka-broker-1.22-receiver-loom","purlType":"apk","versions":[{"text":"< 1.22.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.22.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"knative-kafka-broker-fips-1.18-dispatcher-loom","name":"knative-kafka-broker-fips-1.18-dispatcher-loom","label":"knative-kafka-broker-fips-1.18-dispatcher-loom","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/knative-kafka-broker-fips-1.18-dispatcher-loom","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"knative-kafka-broker-fips-1.18-receiver-loom","name":"knative-kafka-broker-fips-1.18-receiver-loom","label":"knative-kafka-broker-fips-1.18-receiver-loom","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/knative-kafka-broker-fips-1.18-receiver-loom","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"knative-kafka-broker-fips-1.22-dispatcher-loom","name":"knative-kafka-broker-fips-1.22-dispatcher-loom","label":"knative-kafka-broker-fips-1.22-dispatcher-loom","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/knative-kafka-broker-fips-1.22-dispatcher-loom","purlType":"apk","versions":[{"text":"< 1.22.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.22.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"knative-kafka-broker-fips-1.22-receiver-loom","name":"knative-kafka-broker-fips-1.22-receiver-loom","label":"knative-kafka-broker-fips-1.22-receiver-loom","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/knative-kafka-broker-fips-1.22-receiver-loom","purlType":"apk","versions":[{"text":"< 1.22.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.22.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-2-security","name":"opensearch-2-security","label":"opensearch-2-security","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-2-security","purlType":"apk","versions":[{"text":"< 2.19.4-r14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.4-r14","eol":null,"hubHref":null},{"vendor":"chainguard","product":"prometheus-jmx-exporter-strimzi-compat","name":"prometheus-jmx-exporter-strimzi-compat","label":"prometheus-jmx-exporter-strimzi-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/prometheus-jmx-exporter-strimzi-compat","purlType":"apk","versions":[{"text":"< 1.6.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"seata-server","name":"seata-server","label":"seata-server","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/seata-server","purlType":"apk","versions":[{"text":"< 2.6.0-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.0-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator","name":"strimzi-kafka-operator","label":"strimzi-kafka-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 1.2.0-r5 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-cluster-operator","name":"strimzi-kafka-operator-cluster-operator","label":"strimzi-kafka-operator-cluster-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-cluster-operator","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-fips-kafka-thirdparty-libs-cc","name":"strimzi-kafka-operator-fips-kafka-thirdparty-libs-cc","label":"strimzi-kafka-operator-fips-kafka-thirdparty-libs-cc","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-fips-kafka-thirdparty-libs-cc","purlType":"apk","versions":[{"text":"< 1.0.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-kafka-agent","name":"strimzi-kafka-operator-kafka-agent","label":"strimzi-kafka-operator-kafka-agent","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-agent","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-kafka-base","name":"strimzi-kafka-operator-kafka-base","label":"strimzi-kafka-operator-kafka-base","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-base","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 1.2.0-r5 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-kafka-init","name":"strimzi-kafka-operator-kafka-init","label":"strimzi-kafka-operator-kafka-init","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-init","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-kafka-thirdparty-libs","name":"strimzi-kafka-operator-kafka-thirdparty-libs","label":"strimzi-kafka-operator-kafka-thirdparty-libs","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-thirdparty-libs","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","name":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","label":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-thirdparty-libs-cc","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 0.51.0-r24","noFixRecorded":false,"fixedIn":null},{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 0.51.0-r24 | < 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-topic-operator","name":"strimzi-kafka-operator-topic-operator","label":"strimzi-kafka-operator-topic-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-topic-operator","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-tracing-agent","name":"strimzi-kafka-operator-tracing-agent","label":"strimzi-kafka-operator-tracing-agent","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-tracing-agent","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-user-operator","name":"strimzi-kafka-operator-user-operator","label":"strimzi-kafka-operator-user-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-user-operator","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wildfly-openjdk-17","name":"wildfly-openjdk-17","label":"wildfly-openjdk-17","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wildfly-openjdk-17","purlType":"apk","versions":[{"text":"< 40.0.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 40.0.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wildfly-openjdk-21","name":"wildfly-openjdk-21","label":"wildfly-openjdk-21","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wildfly-openjdk-21","purlType":"apk","versions":[{"text":"< 40.0.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 40.0.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"druid","name":"druid","label":"druid","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/druid","purlType":"apk","versions":[{"text":"< 36.0.0-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 36.0.0-r15","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kafka_exporter-strimzi-compat","name":"kafka_exporter-strimzi-compat","label":"kafka_exporter-strimzi-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kafka_exporter-strimzi-compat","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kafka-strimzi-compat","name":"kafka-strimzi-compat","label":"kafka-strimzi-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kafka-strimzi-compat","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"prometheus-jmx-exporter-strimzi-compat","name":"prometheus-jmx-exporter-strimzi-compat","label":"prometheus-jmx-exporter-strimzi-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/prometheus-jmx-exporter-strimzi-compat","purlType":"apk","versions":[{"text":"< 1.6.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator","name":"strimzi-kafka-operator","label":"strimzi-kafka-operator","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 1.2.0-r5 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-cluster-operator","name":"strimzi-kafka-operator-cluster-operator","label":"strimzi-kafka-operator-cluster-operator","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-cluster-operator","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-kafka-agent","name":"strimzi-kafka-operator-kafka-agent","label":"strimzi-kafka-operator-kafka-agent","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-agent","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-kafka-base","name":"strimzi-kafka-operator-kafka-base","label":"strimzi-kafka-operator-kafka-base","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-base","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 1.2.0-r5 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-kafka-init","name":"strimzi-kafka-operator-kafka-init","label":"strimzi-kafka-operator-kafka-init","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-init","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-kafka-thirdparty-libs","name":"strimzi-kafka-operator-kafka-thirdparty-libs","label":"strimzi-kafka-operator-kafka-thirdparty-libs","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-thirdparty-libs","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","name":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","label":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-thirdparty-libs-cc","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 0.51.0-r24","noFixRecorded":false,"fixedIn":null},{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 0.51.0-r24 | < 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-topic-operator","name":"strimzi-kafka-operator-topic-operator","label":"strimzi-kafka-operator-topic-operator","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-topic-operator","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-tracing-agent","name":"strimzi-kafka-operator-tracing-agent","label":"strimzi-kafka-operator-tracing-agent","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-tracing-agent","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-user-operator","name":"strimzi-kafka-operator-user-operator","label":"strimzi-kafka-operator-user-operator","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-user-operator","purlType":"apk","versions":[{"text":"< 1.2.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"wildfly-openjdk-17","name":"wildfly-openjdk-17","label":"wildfly-openjdk-17","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/wildfly-openjdk-17","purlType":"apk","versions":[{"text":"< 40.0.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 40.0.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"wildfly-openjdk-21","name":"wildfly-openjdk-21","label":"wildfly-openjdk-21","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/wildfly-openjdk-21","purlType":"apk","versions":[{"text":"< 40.0.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 40.0.0-r0","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"kafka","name":"kafka","label":"kafka","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/kafka","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"org.apache.kafka","product":"kafka-clients","name":"org.apache.kafka:kafka-clients","label":"kafka-clients","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.apache.kafka/kafka-clients","purlType":"maven","versions":[{"text":"≥ 0.11.0, < 3.9.2","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.0.0, < 4.0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 0.11.0, < 3.9.2 | ≥ 4.0.0, < 4.0.1","eol":null,"hubHref":null}],"affectedCount":56,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://kafka.apache.org/cve-list","label":"kafka.apache.org/cve-list","hostname":"kafka.apache.org","tags":["Vendor Advisory","Advisory","WEB"]},{"url":"https://lists.apache.org/thread/pz5g4ky3h0k91tfd14p0dzqjp80960kl","label":"lists.apache.org/thread/pz5g4ky3h0k91tfd14p0dzqjp80960kl","hostname":"lists.apache.org","tags":["Mailing List","ARTICLE","WEB","Mitigation","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/04/17/3","label":"www.openwall.com/lists/oss-security/2026/04/17/3","hostname":"www.openwall.com","tags":["WEB","Mailing List"]},{"url":"https://ubuntu.com/security/CVE-2026-33558","label":"ubuntu.com/security/CVE-2026-33558","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33558","label":"www.cve.org/CVERecord?id=CVE-2026-33558","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://repo.maven.apache.org/maven2","label":"repo.maven.apache.org/maven2","hostname":"repo.maven.apache.org","tags":["WEB"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33558.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33558.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33558","label":"nvd.nist.gov/vuln/detail/CVE-2026-33558","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/apache/kafka","label":"github.com/apache/kafka","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-WWC6-JRQV-G3VF"]},"timeline":[{"kind":"published","date":"2026-04-20T13:20:38.059Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-20T14:20:41.640Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":21,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T04:52:16.229Z","stale":false,"partial":false}}