This is an automated email from the ASF dual-hosted git repository.
manikumar pushed a commit to branch markdown
in repository https://gitbox.apache.org/repos/asf/kafka-site.git
The following commit(s) were added to refs/heads/markdown by this push:
new dbca291166 minor cleanups (#842)
dbca291166 is described below
commit dbca291166bd4969a57bba80d65e6ce9edebcfed
Author: Manikumar Reddy <[email protected]>
AuthorDate: Tue Apr 7 17:57:13 2026 +0530
minor cleanups (#842)
---
content/en/community/cve-list.md | 34 +++++++++++++++++-----------------
1 file changed, 17 insertions(+), 17 deletions(-)
diff --git a/content/en/community/cve-list.md b/content/en/community/cve-list.md
index 28d8262cd6..1a6787ba1d 100644
--- a/content/en/community/cve-list.md
+++ b/content/en/community/cve-list.md
@@ -42,50 +42,50 @@ Data Integrity: Consumers on the receiving topic may
encounter unexpected or inc
Credit: Bharath Vissapragada (reporter), Donny Nadolny (finder, remediation
developer)
-References: [KAFKA-19012](https://issues.apache.org/jira/browse/KAFKA-19012),
[CVE-2026-35554](https://www.cve.org/CVERecord?id=CVE-2026-35554)
-
-<table>
-<tr>
+References: [KAFKA-19012](https://issues.apache.org/jira/browse/KAFKA-19012),
[CVE-2026-35554](https://www.cve.org/CVERecord?id=CVE-2026-35554)
+
+<table>
+<tr>
<td>
Versions affected
-</td>
+</td>
<td>
Apache Kafka Clients
([kafka-clients](https://mvnrepository.com/artifact/org.apache.kafka/kafka-clients))
2.8.0 through 3.9.1, 4.0.0 through 4.0.1, 4.1.0 through 4.1.1
-</td> </tr>
-<tr>
+</td> </tr>
+<tr>
<td>
Fixed versions
-</td>
+</td>
<td>
3.9.2, 4.0.2, 4.1.2, 4.2.0
-</td> </tr>
-<tr>
+</td> </tr>
+<tr>
<td>
Impact
-</td>
+</td>
<td>
Kafka producer messages may be silently delivered to incorrect topics due to a
buffer pool race condition, potentially exposing sensitive data to unintended
consumers and causing data integrity issues.
-</td> </tr>
-<tr>
+</td> </tr>
+<tr>
<td>
Advice
-</td>
+</td>
<td>
Kafka users are advised to upgrade to 3.9.2, 4.0.2, 4.1.2, 4.2.0, or later to
address this vulnerability.
-</td> </tr>
-<tr>
+</td> </tr>
+<tr>
<td>
Issue announced
-</td>
+</td>
<td>
7 Apr 2026