streams for Apache Kafka 3/console-operator
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| streamshub/console: console-operator: Streams for Apache Kafka Console: Unfiltered Kafka client properties → SA-token exfiltration via config.providers | streams for Apache Kafka 3/console-operator | Red Hat | High | No fix reported | |
| console-operator: Streams for Apache Kafka Console: cross-namespace KafkaUser Secret exfiltration via confused deputy | streams for Apache Kafka 3/console-operator | Red Hat | High | No fix reported | |
| console-operator: Streams for Apache Kafka Console: tenant-controlled container image on ClusterRole-bound pod enables namespace-to-cluster privilege escalation | streams for Apache Kafka 3/console-operator | Red Hat | High | No fix reported |