{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"org.apache.kafka:kafka_2.9.1","cve_ids":["CVE-2025-27819"],"ecosystem":"Maven","epss":0.0103,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-mcwh-c9pg-xw43","id":"tcs_01M5N94Y6GGJBPDFJ7BQ8QP903","modified_at":"2025-12-11T21:01:12.235418Z","published_at":"2025-06-10T09:30:31Z","references":["https://osv.dev/vulnerability/GHSA-mcwh-c9pg-xw43","https://nvd.nist.gov/vuln/detail/CVE-2025-27819","https://github.com/advisories/GHSA-26f8-x7cc-wqpc","https://github.com/apache/kafka","https://kafka.apache.org/cve-list"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-mcwh-c9pg-xw43#Maven/org.apache.kafka:kafka_2.9.1","url":"https://osv.dev/vulnerability/GHSA-mcwh-c9pg-xw43"}],"summary":"Apache Kafka Deserialization of Untrusted Data vulnerability"}