Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
cleanstart/kafka may allow unauthorized data access
published 14 days ago
Summary
The cleanstart/kafka software contains a flaw that could let attackers read or modify data being transferred over the web. This could expose sensitive information or disrupt services. Update to the latest version of cleanstart/kafka or apply the vendor’s recommended patch as soon as possible.
What to do
- Update cleanstart kafka to version 4.0.2-r3.
- Update cleanstart kafka to version 4.1.2-r5.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | kafka |
< 4.0.2-r3 < 4.1.2-r5 Fix: upgrade to 4.0.2-r3
|
Original advisory text
In Eclipse Jetty, a first HTTP/1
CVE-2026-10051 affects multiple packages. In Eclipse Jetty, a first HTTP/1. See references for individual vulnerability details.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published22 Oct 2026
Updated22 Oct 2026
First seen22 Oct 2026
Sources
CLEANSTART-2026-VU71113 · OSV
Track software like this
Free during beta