Apache Kafka ↗

Summary iPlain-English security verdict for Apache Kafka, generated from its current health score, actively-exploited vulnerabilities, and latest supported version.

Apache Kafka currently scores 97/100 — healthy. No tracked vulnerabilities are currently known to be exploited in the wild. The latest supported release is 4.3.0. It's on the latest patch with no significant known issues — keep it current.

Disclosure trend iNew CVEs published for Apache Kafka each year (NVD). A higher bar means more disclosures that year — more scrutiny, not necessarily less safe.

Patch priority — what to act on iThe issues to fix first — actively exploited (CISA KEV) first, then by exploitation probability (EPSS), then severity. Each row's "→ fixed in" is the earliest version that patches it; "see advisory" means no fixed version is published.

Most urgent first — actively exploited, then likeliest to be exploited.

Versions & lifecycle iWhen each release line stops receiving security patches (end-of-life). After EOL there are no more fixes — plan upgrades before these dates.

How long each Apache Kafka release line is supported — and when it sunsets.