Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.3
Strimzi Kafka Operator may crash from recursion
published 21 days ago
Summary
The Strimzi Kafka Operator uses the Apache Commons Lang library, which can be triggered into an endless loop. This can cause the operator to stop responding or restart, affecting Kafka management. Update the operator to the latest version that includes the fix or apply the recommended patch.
What to do
- Update cleanstart strimzi-kafka-operator to version 1.2.0-r3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | strimzi-kafka-operator |
< 1.2.0-r3 Fix: upgrade to 1.2.0-r3
|
Original advisory text
Uncontrolled Recursion vulnerability in Apache Commons Lang
Security vulnerability affects the strimzi-kafka-operator package. Uncontrolled Recursion vulnerability in Apache Commons Lang.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published15 Oct 2026
Updated15 Oct 2026
First seen15 Oct 2026
Sources
CLEANSTART-2026-WE03470 · OSV
Track software like this
Free during beta