Vulnerability Reportdebezium/connect:2.3

This image poses a critical security risk and must not be used in production, especially as an internet-facing service. An attacker can exploit DNS cache poisoning to redirect traffic and intercept data, use HTTP request smuggling to bypass authentication, or cause denial of service via memory exhaustion from crafted Protobuf, Avro, or Snappy payloads. These vulnerabilities are remotely exploitable without authentication and affect core components like Netty DNS and Jetty HTTP, which are integral to the container's operation. No compensating controls are available that fully eliminate these risks; strict network segmentation and input validation are insufficient to prevent exploitation.