Red Hat Security Advisory: Streams for Apache Kafka 2.9.1 release and security update

CVE-2023-1370 — json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) CVE-2024-6763 — org.eclipse.jetty:jetty-http: jetty: Jetty URI parsing of invalid authority CVE-2024-13009 — jetty-server: Jetty: Gzip Request Body Buffer Corruption CVE-2024-31141 — kafka-clients: privilege escalation to filesystem read-access via automatic ConfigProvider CVE-2024-47535 — netty: Denial of Service attack on windows app using Netty CVE-2024-56128 — kafka: Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption CVE-2025-1634 — io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout CVE-2025-24970 — io.netty:netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine CVE-2025-25193 — netty: Denial of Service attack on windows app using Netty CVE-2025-27817 — org.apache.kafka: Kafka Client Arbitrary File Read SSRF CVE-2025-48734 — commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default