spring-projects/spring-kafka Security Advisories | GitStock

medium2026-06-10

In Spring for Apache Kafka, unbounded delegate cache keyed on user-controlled, potentially malicious selector header

GHSA-xvfq-4q6q-gxx7 · CVE-2026-41726

high2026-06-10

In Spring for Apache Kafka, overly broad trusted-package matching in header mappers exposes JDK classes to deserialization

GHSA-xq69-5h5v-x9x4 · CVE-2026-41731

medium2026-06-10

Spring for Apache Kafka: Improper Validation of Retry Topic Header Values Leads to Retry Sequence Manipulation

GHSA-53w6-v7cv-fc9h · CVE-2026-41727

high2023-08-24

Spring-Kafka has Java Deserialization vulnerability When Improperly Configured

GHSA-crqf-q9fp-hwjw · CVE-2023-34040