CLEANSTART-2026-VB56539: zstd-jni versions before 1
Security vulnerability affects the strimzi-kafka-operator package. zstd-jni versions before 1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/strimzi-kafka-operatorto a version that resolves this vulnerability.Fixed in 1.3.0-r0 - Upgrade
Upgrade
zstd-jnito a version that resolves this vulnerability.Fixed in 1
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates that the issue is remotely exploitable over the network, requires no prior privileges, and does not require user interaction. The attack complexity is rated low.
What is the expected security impact?
The reported impact includes high availability impact and low confidentiality impact. No integrity impact is indicated by the CVSS vector.
How can I identify affected deployments?
Review installations of cleanstart/strimzi-kafka-operator and their bundled or resolved zstd-jni dependency version. Deployments using a zstd-jni version earlier than 1 are identified as affected by the advisory.