All 4 CVE vulnerabilities found in Spring For Apache Kafka, with AI-generated Chinese analysis, references, and POCs.
Vendor: Spring
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-41731 | In Spring for Apache Kafka, overly broad trusted-package matching in header mappers exposes JDK classes to deserialization CWE-502 | 8.1 | High | 2026-06-09 |
| CVE-2026-41727 | In Spring for Apache Kafka, forged retry topic headers subvert retry routing and backoff behavior CWE-20 | 6.5 | Medium | 2026-06-09 |
| CVE-2026-41726 | In Spring for Apache Kafka, unbounded delegate cache keyed on user-controlled, potentially malicious selector header CWE-770 | 6.5 | Medium | 2026-06-09 |
| CVE-2023-34040 | Java Deserialization vulnerability in Spring-Kafka When Improperly Configured CWE-502 | 5.3 | Medium | 2023-08-24 |
All 4 known CVE vulnerabilities affecting Spring For Apache Kafka with full Chinese analysis, references, and POCs where available.