Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.kafka/kafka_2.10@0.10.1.1
purl pkg:maven/org.apache.kafka/kafka_2.10@0.10.1.1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-fted-1y3h-tye2
Aliases:
CVE-2017-12610
GHSA-xm78-4m3g-7wm7
In Apache Kafka 0.10.0.0 to 0.10.2.1 and 0.11.0.0 to 0.11.0.1, authenticated Kafka clients may use impersonation via a manually crafted protocol message with SASL/PLAIN or SASL/SCRAM authentication when using the built-in PLAIN or SCRAM server implementations in Apache Kafka.
0.10.2.2
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T20:46:40.153794+00:00 GitLab Importer Affected by VCID-fted-1y3h-tye2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.kafka/kafka_2.10/CVE-2017-12610.yml 38.4.0
2026-04-11T21:57:28.311946+00:00 GitLab Importer Affected by VCID-fted-1y3h-tye2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.kafka/kafka_2.10/CVE-2017-12610.yml 38.3.0
2026-04-02T22:10:50.015208+00:00 GitLab Importer Affected by VCID-fted-1y3h-tye2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.kafka/kafka_2.10/CVE-2017-12610.yml 38.1.0
2026-04-01T16:28:10.104190+00:00 GitLab Importer Affected by VCID-fted-1y3h-tye2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.kafka/kafka_2.10/CVE-2017-12610.yml 38.0.0