CoreWCF.Kafka vulnerabilities

CVEs whose affected-version data names the CoreWCF.Kafka package (nuget). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-54775Medium· 6.5

CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.

CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.

▾ SunlitCoreWCF · CoreWCF.KafkaEPSS 0.60%via GHSA

CoreWCF.Kafka vulnerabilities (CVEs) · VulnSea