Red Hat Security Advisory: Streams for Apache Kafka 3.0.0 release and security update

CVE-2023-1370 — json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) CVE-2024-6763 — org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority CVE-2024-13009 — jetty-server: Jetty: Gzip Request Body Buffer Corruption CVE-2024-31141 — kafka-clients: privilege escalation to filesystem read-access via automatic ConfigProvider CVE-2024-47535 — netty: Denial of Service attack on windows app using Netty CVE-2024-56128 — kafka: Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption CVE-2025-1634 — io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout CVE-2025-24970 — io.netty:netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine CVE-2025-25193 — netty: Denial of Service attack on windows app using Netty CVE-2025-48734 — commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default CVE-2025-48924 — commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang CVE-2025-49574 — io.quarkus/quarkus-vertx: Quarkus potential data leak CVE-2025-53864 — com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT