This is an automated email from the ASF dual-hosted git repository.
github-bot pushed a commit to branch asf-staging
in repository https://gitbox.apache.org/repos/asf/kafka-site.git
The following commit(s) were added to refs/heads/asf-staging by this push:
new bda2f10225 Updated asf-staging from GHA workflow run 24081265913
bda2f10225 is described below
commit bda2f10225c09bc39c259d9f533f7552a83bc40f
Author: github-actions[bot]
<41898282+github-actions[bot]@users.noreply.github.com>
AuthorDate: Tue Apr 7 12:29:52 2026 +0000
Updated asf-staging from GHA workflow run 24081265913
Commit:
https://github.com/apache/kafka-site/commit/dbca291166bd4969a57bba80d65e6ce9edebcfed
GitHub Run: https://github.com/apache/kafka-site/actions/runs/24081265913
---
community/cve-list/index.html | 6 +++---
sitemap.xml | 2 +-
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/community/cve-list/index.html b/community/cve-list/index.html
index aea5e7946e..ae468dd51b 100644
--- a/community/cve-list/index.html
+++ b/community/cve-list/index.html
@@ -1,8 +1,8 @@
<!doctype html><html itemscope itemtype=http://schema.org/WebPage lang=en
class=no-js><head><meta charset=utf-8><meta name=viewport
content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name=robots
content="index, follow"><link rel=icon type=image/png sizes=32x32
href=/images/apache.png><link rel=icon type=image/png sizes=16x16
href=/images/apache.png><link rel="shortcut icon" href=/images/apache.png><link
rel=apple-touch-icon sizes=180x180 href=/images/apache.png><title>CV [...]
<meta name=description content="Apache Kafka Security Vulnerabilities This
page lists all security vulnerabilities fixed in released versions of Apache
Kafka.
This page does not list security advisories for dependencies of Kafka. If your
security scanner warns that there is an advisory for a dependency of Kafka,
please see this documentation. You can find the current development versions of
various dependencies here. You can find a list of advisories that have been
confirmed not to apply to Kafka here."><meta property="og:title" content="CVE
List"><meta property="og:description" content="Apache Kafka Security
Vulnerabilities This page lists al [...]
-This page does not list security advisories for dependencies of Kafka. If your
security scanner warns that there is an advisory for a dependency of Kafka,
please see this documentation. You can find the current development versions of
various dependencies here. You can find a list of advisories that have been
confirmed not to apply to Kafka here."><meta property="og:type"
content="article"><meta property="og:url"
content="https://kafka.apache.org/community/cve-list/";><meta property="arti
[...]
-This page does not list security advisories for dependencies of Kafka. If your
security scanner warns that there is an advisory for a dependency of Kafka,
please see this documentation. You can find the current development versions of
various dependencies here. You can find a list of advisories that have been
confirmed not to apply to Kafka here."><meta itemprop=dateModified
content="2026-04-07T17:31:53+05:30"><meta itemprop=wordCount
content="3571"><meta itemprop=keywords content><meta [...]
+This page does not list security advisories for dependencies of Kafka. If your
security scanner warns that there is an advisory for a dependency of Kafka,
please see this documentation. You can find the current development versions of
various dependencies here. You can find a list of advisories that have been
confirmed not to apply to Kafka here."><meta property="og:type"
content="article"><meta property="og:url"
content="https://kafka.apache.org/community/cve-list/";><meta property="arti
[...]
+This page does not list security advisories for dependencies of Kafka. If your
security scanner warns that there is an advisory for a dependency of Kafka,
please see this documentation. You can find the current development versions of
various dependencies here. You can find a list of advisories that have been
confirmed not to apply to Kafka here."><meta itemprop=dateModified
content="2026-04-07T17:57:13+05:30"><meta itemprop=wordCount
content="3571"><meta itemprop=keywords content><meta [...]
This page does not list security advisories for dependencies of Kafka. If your
security scanner warns that there is an advisory for a dependency of Kafka,
please see this documentation. You can find the current development versions of
various dependencies here. You can find a list of advisories that have been
confirmed not to apply to Kafka here."><link rel=preload
href=/scss/main.min.69b0f43de0cd12cd158eaf47ea571b3800d97c1ef9ffc85787b2bcbb7d159d4a.css
as=style integrity="sha256-abD0PeDN [...]
<span></span>
<span></span></div></button>
@@ -23,7 +23,7 @@ This page does not list security advisories for dependencies
of Kafka. If your s
<a
href="https://github.com/apache/kafka-site//new/markdown/content/en/community?filename=change-me.md&value=---%0Atitle%3A+%22Long+Page+Title%22%0AlinkTitle%3A+%22Short+Nav+Title%22%0Aweight%3A+100%0Adescription%3A+%3E-%0A+++++Page+description+for+heading+and+indexes.%0A---%0A%0A%23%23+Heading%0A%0AEdit+this+template+to+create+your+new+page.%0A%0A%2A+Give+it+a+good+name%2C+ending+in+%60.md%60+-+e.g.+%60getting-started.md%60%0A%2A+Edit+the+%22front+matter%22+section+at+the+top+of+the
[...]
<a href="https://github.com/apache/kafka-site//issues/new?title=CVE%20List";
class="td-page-meta--issue td-page-meta__issue" target=_blank rel=noopener><i
class="fa-solid fa-list-check fa-fw"></i> Create documentation issue</a>
<a id=print href=/community/_print/><i class="fa-solid fa-print fa-fw"></i>
Print entire section</a></div></div><div class=td-sticky-content><div
class=td-toc-content><div class=td-toc><nav
id=TableOfContents><ul><li><ul><li><a
href=#apache-kafka-security-vulnerabilities>Apache Kafka Security
Vulnerabilities</a></li><li><a href=#CVE-2026-35554><a
href=https://nvd.nist.gov/vuln/detail/CVE-2026-35554>CVE-2026-35554</a> Apache
Kafka Clients: Kafka Producer Message Corruption and Misrouting [...]
-When those two preconditions are met, Kafka will treat the resource as if it
had only one ACL associated with it after the removal, rather than the two or
more that would be correct. The incorrect condition is cleared by removing all
brokers in ZK mode, or by adding a new ACL to the affected resource. Once the
migration is completed, there is no metadata loss (the ACLs all
remain).</li></ol><table><tr><td><p>Versions affected</p></td><td><p>3.5.0 -
3.6.1</p></td></tr><tr><td><p>Fixed ver [...]
+When those two preconditions are met, Kafka will treat the resource as if it
had only one ACL associated with it after the removal, rather than the two or
more that would be correct. The incorrect condition is cleared by removing all
brokers in ZK mode, or by adding a new ACL to the affected resource. Once the
migration is completed, there is no metadata loss (the ACLs all
remain).</li></ol><table><tr><td><p>Versions affected</p></td><td><p>3.5.0 -
3.6.1</p></td></tr><tr><td><p>Fixed ver [...]
<span class="text-dark text-truncate d-inline-block"
style=max-width:18rem>Contact</span></a></div><div class="ms-auto d-flex
flex-column align-items-end"><a class="btn pager-btn rounded-3 fw-semibold py-2
px-3 d-inline-flex align-items-center gap-2" style=min-width:12rem
href=/community/developer/ rel=next aria-label="Next: Developer Guide"><span
class="fw-semibold text-dark">Next:</span>
<span class="text-dark text-truncate d-inline-block text-end"
style=max-width:18rem>Developer Guide
</span><span class="fw-semibold
text-dark">›</span></a></div></nav></div></main></div></div><footer
class="td-footer d-print-none"><div class=container-fluid><div class="row
align-items-center"><div class="col-12 col-md-3 text-center text-md-start"><div
class=td-footer__social-icons><a href=/community/contact/ target=_blank
rel=noopener aria-label=Contact class=td-footer__social-link><i class="fa
fa-envelope"></i>
diff --git a/sitemap.xml b/sitemap.xml
index 5f202d7864..55a3fb7e62 100644
--- a/sitemap.xml
+++ b/sitemap.xml
@@ -1 +1 @@
-<?xml version="1.0" encoding="utf-8" standalone="yes"?><urlset
xmlns="http://www.sitemaps.org/schemas/sitemap/0.9";
xmlns:xhtml="http://www.w3.org/1999/xhtml";><url><loc>https://kafka.apache.org/0100/implementation/api-design/</loc><lastmod>2025-12-19T18:23:57-08:00</lastmod></url><url><loc>https://kafka.apache.org/0101/implementation/api-design/</loc><lastmod>2025-12-19T18:23:57-08:00</lastmod></url><url><loc>https://kafka.apache.org/0102/implementation/api-design/</loc><lastmod>2025-12-1
[...]
\ No newline at end of file
+<?xml version="1.0" encoding="utf-8" standalone="yes"?><urlset
xmlns="http://www.sitemaps.org/schemas/sitemap/0.9";
xmlns:xhtml="http://www.w3.org/1999/xhtml";><url><loc>https://kafka.apache.org/0100/implementation/api-design/</loc><lastmod>2025-12-19T18:23:57-08:00</lastmod></url><url><loc>https://kafka.apache.org/0101/implementation/api-design/</loc><lastmod>2025-12-19T18:23:57-08:00</lastmod></url><url><loc>https://kafka.apache.org/0102/implementation/api-design/</loc><lastmod>2025-12-1
[...]
\ No newline at end of file
