StackRadar

CVE-2026-33558

Medium

Advisory

Published 20 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
160
of 17,781 indexed, latest versions
Container images
151
deployed by those charts
Fix available
3 of 3
affected packages

Apache Kafka, Apache Kafka Clients: Information Exposure Through Network Client Log Output

Carried by container images the latest versions of 160 of 17,781 indexed charts deploy, on 151 images.

Affected packageAffected versionsFixed inImages
kafka-clientsmaven0.11.0.0, 0.11.0.3, 1.0.1, 1.1.0+38 more3.9.2, 4.0.1151
kafkabitnami2.8.1-150, 3.4.0-2, 3.5.0-03.9.23
Apache Kafkabitnami3.5.03.9.21
OSV records
BIT-kafka-2026-33558GHSA-wf66-mphr-4c4r

Charts affected

160 by stars
ChartLatestAffected imagesRadar Score
kadeck-webkadeck0.6.01 of 1See more

kadeck-web kadeck 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
xeotek/kadeck:4.2.94c6b04d9ce55
kafka-clients@3.3.1
3.9.2

Open the chart page →

7,254
strimzi-kafka-operatorkvalitetsitVerified publisher0.36.11 of 1See more

strimzi-kafka-operator kvalitetsit 0.36.1

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.36.1e9e03b31007c
kafka-clients@3.5.1
3.9.2

Open the chart page →

4,098
opendistro-eslsst-sqre1.4.11 of 3See more

opendistro-es lsst-sqre 1.4.1

1 of the 3 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.4.06df71eb04639
kafka-clients@2.0.1
3.9.2

Open the chart page →

7,929
eoloplantmca-eoloplaner0.1.01 of 7See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
hugohg34/planner:0.0.2171f61e8d7e2
kafka-clients@3.0.0
3.9.2

Open the chart page →

29,588
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
kafka-clients@2.5.0
3.9.2

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
kafka-clients@2.5.0
3.9.2

Open the chart page →

10,603
mitre-siphonmitre-siphon0.2.91 of 4See more

mitre-siphon mitre-siphon 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/mitre-siphon:main503c00321502
kafka-clients@3.3.2
3.9.2

Open the chart page →

3,083
account-lookup-servicemojaloop13.0.01 of 4See more

account-lookup-service mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
kafka-clients@3.3.0
3.9.2

Open the chart page →

11,695
account-lookup-service-adminmojaloop13.0.01 of 4See more

account-lookup-service-admin mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
kafka-clients@3.3.0
3.9.2

Open the chart page →

11,695
admin-api-svcmojaloop12.0.01 of 4See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
kafka-clients@3.3.0
3.9.2

Open the chart page →

12,108
backendmojaloop0.1.01 of 6See more

backend mojaloop 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:2.8.1-debian-11-r7b6e381ffd6ae
kafka@2.8.1-150
kafka-clients@2.8.1
3.9.2
3.9.2

Open the chart page →

16,198
fspiop-transfer-api-svcmojaloop12.0.11 of 3See more

fspiop-transfer-api-svc mojaloop 12.0.1

1 of the 3 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
kafka-clients@3.3.0
3.9.2

Open the chart page →

11,479
mojaloopmojaloop14.0.01 of 6See more

mojaloop mojaloop 14.0.0

1 of the 6 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
kafka-clients@3.3.0
3.9.2

Open the chart page →

19,226
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
adagber/planner:v1.0e5c1ed097752
kafka-clients@3.0.0
3.9.2

Open the chart page →

27,721
kafka-helm-chartnotesprojectchart0.1.01 of 1See more

kafka-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
kafka-clients@2.8.1
3.9.2

Open the chart page →

4,547
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
vlebediantsev/logic-ms:latestdf8bf38c535b
kafka-clients@3.1.1
3.9.2

Open the chart page →

6,852
registration-ms-helm-chartnotesprojectchart0.1.01 of 2See more

registration-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-final:latest427af418b75e
kafka-clients@3.1.1
3.9.2

Open the chart page →

5,916
user-data-ms-helm-chartnotesprojectchart0.1.01 of 2See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
vlebediantsev/user-data-ms-final-final:latest9319437f3c8f
kafka-clients@3.1.1
3.9.2

Open the chart page →

5,873
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
kafka-clients@2.8.1
3.9.2

Open the chart page →

8,540
apicurioone-acre-fundVerified publisher2.3.02 of 5See more

apicurio one-acre-fund 2.3.0

2 of the 5 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
kafka-clients@3.3.2
3.9.2
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
kafka-clients@3.3.2
3.9.2

Open the chart page →

18,667
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
kafka-clients@2.2.0
3.9.2

Open the chart page →

63,223
ves-agentopencord1.0.21 of 1See more

ves-agent opencord 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
opencord/ves-agent:1.0.04187e2a8c918
kafka-clients@1.1.0
3.9.2

Open the chart page →

6,350
bpjstk-serviceopenshift1.0.01 of 6See more

bpjstk-service openshift 1.0.0

1 of the 6 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
andrianrf/backoffice-be:latest6036614803d4
kafka-clients@3.1.2
3.9.2

Open the chart page →

34,671
fineractopenshift0.1.11 of 4See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
apache/fineract:1.12.1a83cf1980609
kafka-clients@3.8.1
3.9.2

Open the chart page →

7,792
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
kafka-clients@3.0.1
3.9.2

Open the chart page →

13,607
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
kafka-clients@3.0.1
3.9.2

Open the chart page →

11,738
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
kafka-clients@3.0.1
3.9.2

Open the chart page →

13,568
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
kafka-clients@3.0.1
3.9.2

Open the chart page →

13,551
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
kafka-clients@3.0.1
3.9.2

Open the chart page →

13,455
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
kafka-clients@3.0.1
3.9.2

Open the chart page →

13,100
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
openwhisk/invoker:1.0.0f5831ec85525
kafka-clients@2.4.0
3.9.2

Open the chart page →

36,215
dfdeweyosdfir-infrastructureVerified publisher1.0.01 of 3See more

dfdewey osdfir-infrastructure 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.12.0645d3d9390ad
kafka-clients@3.5.1
3.9.2

Open the chart page →

1,190
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
opensearchproject/opensearch:3.1.0474ea3fdf25d
kafka-clients@4.0.0
4.0.1

Open the chart page →

71,208
timesketchosdfir-infrastructureVerified publisher1.0.81 of 6See more

timesketch osdfir-infrastructure 1.0.8

1 of the 6 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.14.0466a49f379bb
kafka-clients@3.7.0
3.9.2

Open the chart page →

1,753
p4p40.1.01 of 7See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
kafka-clients@3.0.0
3.9.2

Open the chart page →

27,537
Practica_4_helmpr04helm0.1.01 of 7See more

Practica_4_helm pr04helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
pcarrascoponce/planner:v1.0981fc482442c
kafka-clients@3.0.0
3.9.2

Open the chart page →

27,558
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
trinodb/trino:45038c6f24ab1a4
kafka-clients@3.7.0
3.9.2

Open the chart page →

21,211
radar-kafkaradar-baseVerified publisher0.4.11 of 2See more

radar-kafka radar-base 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.46.0ac434a48ac2b
kafka-clients@4.0.0
4.0.1

Open the chart page →

4,219
strimzi-kafka-operatorradar-baseVerified publisher0.46.01 of 1See more

strimzi-kafka-operator radar-base 0.46.0

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.46.0ac434a48ac2b
kafka-clients@4.0.0
4.0.1

Open the chart page →

1,951
kafkasb-helm-charts0.3.01 of 2See more

kafka sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
provectuslabs/kafka-ui:latest8f2ff02d64b0
kafka-clients@3.5.0
3.9.2

Open the chart page →

1,597
seataseataVerified publisher0.1.01 of 1See more

seata seata 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
seataio/seata-server:latest703b5de7f1a6
kafka-clients@3.1.2
3.9.2

Open the chart page →

4,245
seldon-core-oauth-gatewayseldon0.3.11 of 2See more

seldon-core-oauth-gateway seldon 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
seldonio/apife:0.3.1eea0d3f578ca
kafka-clients@0.11.0.0
3.9.2

Open the chart page →

8,098
shenyushenyu0.6.31 of 2See more

shenyu shenyu 0.6.3

1 of the 2 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
apache/shenyu-bootstrap:2.5.11bd5756f6273
kafka-clients@3.0.1
3.9.2

Open the chart page →

8,804
shenyushenyu-helm-chart-test2.4.271 of 2See more

shenyu shenyu-helm-chart-test 2.4.27

1 of the 2 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
kafka-clients@2.3.1
3.9.2

Open the chart page →

12,513
strimzi-user-operatorspartan0.4.01 of 1See more

strimzi-user-operator spartan 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.45.158c727cd2e68
kafka-clients@3.9.1
3.9.2

Open the chart page →

1,836
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
kafka-clients@2.4.1
3.9.2

Open the chart page →

13,767
static-src-people-detector-appstatic-src-people-detector-chartVerified publisher1.5.54 of 6See more

static-src-people-detector-app static-src-people-detector-chart 1.5.5

4 of the 6 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
fimperato/detected-info-notification:1.2.6-RELEASE6441f6545613
kafka-clients@3.1.2
3.9.2
fimperato/detected-info-store:1.1.0-RELEASEe32920eedd3a
kafka-clients@3.1.2
3.9.2
fimperato/static-src-info-data-transformation:1.0.5-RELEASEdf05c388ea6c
kafka-clients@3.1.2
3.9.2
fimperato/static-src-people-detection:1.1.5-RELEASEc0cfaca070d9
kafka-clients@3.1.2
3.9.2

Open the chart page →

13,646
netforge-besvtechVerified publisher0.0.21 of 3See more

netforge-be svtech 0.0.2

1 of the 3 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
conductoross/conductor:3.31.09fba127693e6
kafka-clients@3.7.2
3.9.2

Open the chart page →

4,674
zipkin-gcpt3n1.0.01 of 1See more

zipkin-gcp t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
openzipkin/zipkin-gcp:0.15.2b5d51d1144e2
kafka-clients@2.3.0
3.9.2

Open the chart page →

4,538
hadoop-deploymenttejaswita-hadoop-helmchart1.0.01 of 1See more

hadoop-deployment tejaswita-hadoop-helmchart 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33558.

Container imageDigestPackageFixed in
apache/hadoop:3af361b20bec0
kafka-clients@2.8.2
3.9.2

Open the chart page →

4,240

Container images carrying it

151 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/strimzi/operator:0.36.1e9e03b31007c
kafka-clients@3.5.1
3.9.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.