CLEANSTART-2026-US52877: zstd-jni versions before 1

Q: What access does an attacker need to exploit this issue?

The CVSS vector indicates exploitation can be performed remotely over the network, with low attack complexity. No privileges or user interaction are required.

Q: What is the expected security impact?

The reported impact is high on availability and low on confidentiality. No integrity impact is reported, and the vulnerability does not cross a security authority boundary.

Q: How can I determine whether my deployment is affected?

Check the zstd-jni version used by the kafka package or included through its dependency tree. Versions earlier than 1 are identified as affected.

Published Nov 11, 2026

Updated

Security vulnerability affects the kafka package. zstd-jni versions before 1.

Affected Software

1 affected componentFixes available

cleanstart/kafka<4.0.2-r6

4.0.2-r6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/kafka to a version that resolves this vulnerability.
Fixed in 4.0.2-r6
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1

Event History

Nov 11, 2026

Advisory Published

via OSV·12:38 AM

Data Sourced

via OSV·12:38 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-87795

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The CVSS vector indicates exploitation can be performed remotely over the network, with low attack complexity. No privileges or user interaction are required.

What is the expected security impact?

The reported impact is high on availability and low on confidentiality. No integrity impact is reported, and the vulnerability does not cross a security authority boundary.

How can I determine whether my deployment is affected?

Check the zstd-jni version used by the kafka package or included through its dependency tree. Versions earlier than 1 are identified as affected.

CLEANSTART-2026-US52877: zstd-jni versions before 1

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the expected security impact?

How can I determine whether my deployment is affected?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the expected security impact?

How can I determine whether my deployment is affected?