StackRadar

CVE-2026-33558

Medium

Advisory

Published 20 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
160
of 17,781 indexed, latest versions
Container images
151
deployed by those charts
Fix available
3 of 3
affected packages

Apache Kafka, Apache Kafka Clients: Information Exposure Through Network Client Log Output

Carried by container images the latest versions of 160 of 17,781 indexed charts deploy, on 151 images.

Affected packageAffected versionsFixed inImages
kafka-clientsmaven0.11.0.0, 0.11.0.3, 1.0.1, 1.1.0+38 more3.9.2, 4.0.1151
kafkabitnami2.8.1-150, 3.4.0-2, 3.5.0-03.9.23
Apache Kafkabitnami3.5.03.9.21
OSV records
BIT-kafka-2026-33558GHSA-wf66-mphr-4c4r

Charts affected

160 by stars
ChartLatestAffected imagesRadar Score
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
kafka-clients@3.0.0
3.9.2

Open the chart page →

7,713
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
wazuh/wazuh-indexer:4.14.3b149b30da686
kafka-clients@3.9.1
3.9.2

Open the chart page →

11,384
apicurio-registryapicurio-registry-helmVerified publisher3.8.01 of 2See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
kafka-clients@3.5.1
3.9.2

Open the chart page →

6,675
zipkincarlosjgp0.2.01 of 2See more

zipkin carlosjgp 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
openzipkin/zipkin:2.21.060c3970df479
kafka-clients@2.4.1
3.9.2

Open the chart page →

3,229
apim3graviteeioVerified publisher4.12.192 of 4See more

apim3 graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
kafka-clients@3.7.1
3.9.2
graviteeio/apim-management-api:4.12.19-debian27374522cd04
kafka-clients@3.7.1
3.9.2

Open the chart page →

4,806
druiddruid-helmVerified publisher37.0.21 of 3See more

druid druid-helm 37.0.2

1 of the 3 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
kafka-clients@3.9.1
3.9.2

Open the chart page →

3,812
kafkakubelauncherVerified publisher0.1.261 of 1See more

kafka kubelauncher 0.1.26

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/kafkadigest-pinned43e1085cd0a8
kafka-clients@3.9.0
3.9.2

Open the chart page →

1,360
kafkakafka18.0.11 of 1See more

kafka kafka 18.0.1

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
kafka-clients@3.7.1
3.9.2

Open the chart page →

3,395
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
wazuh/wazuh-indexer:4.11.1a7a2076b167e
kafka-clients@3.7.1
3.9.2

Open the chart page →

6,168
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
kafka-clients@2.0.0
3.9.2

Open the chart page →

7,930
zipkinygqygq2Verified publisher2.1.41 of 4See more

zipkin ygqygq2 2.1.4

1 of the 4 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
openzipkin/zipkin:2.24197a9692f6a9
kafka-clients@3.6.0
3.9.2

Open the chart page →

2,764
hertzbeathertzbeatOfficialVerified publisher1.8.12 of 4See more

hertzbeat hertzbeat 1.8.1

2 of the 4 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
apache/hertzbeat:1.8.075d48a62748f
kafka-clients@3.7.1
3.9.2
apache/hertzbeat-collector:1.8.0a2bab1be574c
kafka-clients@3.7.1
3.9.2

Open the chart page →

14,000
kubernetes-loggingkubernetes-logging4.8.02 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

2 of the 6 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
kafka-clients@3.3.1
3.9.2
opensearchproject/opensearch:2.10.0c8f3ebd2a934
kafka-clients@3.5.1
3.9.2

Open the chart page →

10,530
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
kafka-clients@2.8.1
3.9.2

Open the chart page →

7,166
opensearchcaptnbpVerified publisher3.1.11 of 2See more

opensearch captnbp 3.1.1

1 of the 2 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.19.269588c664014
kafka-clients@3.7.1
3.9.2

Open the chart page →

998
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
kafka-clients@3.9.1
3.9.2

Open the chart page →

5,235
cloudflowcloudflow-helm-charts0.0.0-NIGHTLY011220201 of 1See more

cloudflow cloudflow-helm-charts 0.0.0-NIGHTLY01122020

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
lightbend/cloudflow-operator:0.0.0-NIGHTLY011220202647f396de23
kafka-clients@2.5.0
3.9.2

Open the chart page →

1,886
cmak-operatorcmak-operatorVerified publisher2.2.21 of 3See more

cmak-operator cmak-operator 2.2.2

1 of the 3 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
ghcr.io/eshepelyuk/dckr/cmak-3.0.0.6:1.2.090a34412c6b5
kafka-clients@2.4.1
3.9.2

Open the chart page →

4,605
flowableflowable-oss7.1.01 of 2See more

flowable flowable-oss 7.1.0

1 of the 2 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
flowable/flowable-rest:7.1.0b7ae287502cd
kafka-clients@3.7.1
3.9.2

Open the chart page →

2,784
aegraviteeioVerified publisher3.0.21 of 1See more

ae graviteeio 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
graviteeio/ae-engine:3.0.24140932887e0
kafka-clients@3.7.1
3.9.2

Open the chart page →

1,380
apimgraviteeioVerified publisher4.12.192 of 4See more

apim graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
kafka-clients@3.7.1
3.9.2
graviteeio/apim-management-api:4.12.19-debian27374522cd04
kafka-clients@3.7.1
3.9.2

Open the chart page →

4,806
skywalkingkubesphere-testVerified publisher3.1.01 of 4See more

skywalking kubesphere-test 3.1.0

1 of the 4 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.1.0-es7641237e0299b
kafka-clients@2.4.1
3.9.2

Open the chart page →

18,042
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
kafka-clients@3.0.1
3.9.2

Open the chart page →

7,901
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
kafka-clients@3.3.2
3.9.2

Open the chart page →

107,811
kafka-chartsoldevelo-kafka-chart32.4.41 of 1See more

kafka-chart soldevelo-kafka-chart 32.4.4

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
kafka-clients@4.0.0
4.0.1

Open the chart page →

2,355
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.262 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

2 of the 6 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
Apache Kafka@3.5.0
kafka@3.5.0-0
kafka-clients@3.5.0
3.9.2
3.9.2
3.9.2
thingsboard/tb-node:3.6.0f40a542832c4
kafka-clients@3.2.0
3.9.2

Open the chart page →

14,566
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
kafka@3.4.0-2
kafka-clients@3.4.0
3.9.2
3.9.2

Open the chart page →

17,877
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
kafka-clients@2.5.0
3.9.2

Open the chart page →

10,730
ignitecloudnativeapp1.0.01 of 1See more

ignite cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
apacheignite/ignite:2.7.0d7deab68b8fa
kafka-clients@1.1.1
3.9.2

Open the chart page →

7,891
dbrepodbrepo1.13.31 of 25See more

dbrepo dbrepo 1.13.3

1 of the 25 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
kafka-clients@3.7.1
3.9.2

Open the chart page →

52,635
enavenav-service-architectureVerified publisher0.0.71 of 10See more

enav enav-service-architecture 0.0.7

1 of the 10 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
apache/kafka:3.9.0fbc7d7c428e3
kafka-clients@3.9.0
3.9.2

Open the chart page →

15,860
pitchforkexpediagroup0.1.41 of 1See more

pitchfork expediagroup 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
expediagroup/pitchfork:1.314f2cf61e7de9
kafka-clients@3.0.0
3.9.2

Open the chart page →

3,309
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
provectuslabs/kafka-ui:latest8f2ff02d64b0
kafka-clients@3.5.0
3.9.2

Open the chart page →

15,562
stormgresearch1.2.01 of 3See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
library/storm:2.4.0bd5d420506d6
kafka-clients@0.11.0.3
3.9.2

Open the chart page →

6,165
seata-serverheidaodageshiwoVerified publisher1.0.01 of 1See more

seata-server heidaodageshiwo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
seataio/seata-server:1.5.1ee1ed55f4144
kafka-clients@2.6.3
3.9.2

Open the chart page →

5,624
traccarjeffrescVerified publisher0.2.01 of 2See more

traccar jeffresc 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
traccar/traccar:6.7-alpine621c8d6d46fd
kafka-clients@4.0.0
4.0.1

Open the chart page →

1,341
kafka-kraft-on-k8skafka-kraft-on-k8sVerified publisher1.1.03 of 3See more

kafka-kraft-on-k8s kafka-kraft-on-k8s 1.1.0

3 of the 3 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
kafkakraft/kafka-connect:3.7.0062d697db7e5
kafka-clients@3.7.0
3.9.2
kafkakraft/kafka-controller:3.7.0f261ad288fce
kafka-clients@3.7.0
3.9.2
kafkakraft/kafkakraft:3.7.02e4b593b878b
kafka-clients@3.7.0
3.9.2

Open the chart page →

14,130
kokukokuVerified publisher1.0.01 of 7See more

koku koku 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
kafka-clients@2.8.2
3.9.2

Open the chart page →

12,019
magentomagento3.2.31 of 12See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
magento/magento-cloud-docker-opensearch:2.5-1.4.059fb6f0f1461
kafka-clients@3.0.2
3.9.2

Open the chart page →

13,479
kafka-managerradar-baseVerified publisher2.3.11 of 1See more

kafka-manager radar-base 2.3.1

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
radarbase/kafka-manager:1.3.3.181d2af7dd5a4e
kafka-clients@1.1.0
3.9.2

Open the chart page →

4,000
logstashromanow-helm-chartsVerified publisher1.5.01 of 1See more

logstash romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
library/logstash:7.17.817a4f64e9cf5
kafka-clients@2.5.1
3.9.2

Open the chart page →

7,529
seldon-coreseldon0.2.71 of 3See more

seldon-core seldon 0.2.7

1 of the 3 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
seldonio/apife:0.2.7ba81b17f00eb
kafka-clients@0.11.0.0
3.9.2

Open the chart page →

13,798
analyticsaccount-serviceVerified publisher0.4.21 of 1See more

analytics account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
vitalii1992/analytics-service:latest8e798836ecea
kafka-clients@3.4.0
3.9.2

Open the chart page →

2,326
keycloakaccount-serviceVerified publisher18.4.51 of 2See more

keycloak account-service 18.4.5

1 of the 2 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
kafka-clients@3.0.0
3.9.2

Open the chart page →

7,713
quotes-provideraccount-serviceVerified publisher0.4.21 of 1See more

quotes-provider account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
vitalii1992/quotes-provider-service:latest44d2d6e00ab3
kafka-clients@3.4.0
3.9.2

Open the chart page →

2,205
airports-apiairports-api0.1.01 of 1See more

airports-api airports-api 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
dina1993/airports-api:latestac731244aed1
kafka-clients@3.3.2
3.9.2

Open the chart page →

1,958
airports-consumerairports-consumer0.1.01 of 1See more

airports-consumer airports-consumer 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
dina1993/airports-consumer:latest669d146a5e63
kafka-clients@3.3.2
3.9.2

Open the chart page →

1,947
airports-kafkaairports-kafka0.1.01 of 2See more

airports-kafka airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
kafka-clients@2.8.1
3.9.2

Open the chart page →

4,547
airports-producerairports-producer0.1.01 of 1See more

airports-producer airports-producer 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
dina1993/airports-producer:latest3d6b0dac1cb4
kafka-clients@3.3.2
3.9.2

Open the chart page →

1,947
akto-ai-guardrails-v2akto0.3.01 of 6See more

akto-ai-guardrails-v2 akto 0.3.0

1 of the 6 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
kafka-clients@3.9.1
3.9.2

Open the chart page →

9,321

Container images carrying it

151 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/strimzi/operator:0.36.1e9e03b31007c
kafka-clients@3.5.1
3.9.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.