org.springframework.kafka:spring-kafka vulnerabilities (Maven)

4 vulnerabilities.

• org.springframework.kafka:spring-kafka Maven In Spring for Apache Kafka, overly broad trusted-package matching in header mappers exposes JDK classes to deserialization CVE-2026-41731 Fix available 8.1 HighJune 9, 2026
• org.springframework.kafka:spring-kafka Maven In Spring for Apache Kafka, forged retry topic headers subvert retry routing and backoff behavior CVE-2026-41727 Fix available 6.5 MediumJune 9, 2026
• org.springframework.kafka:spring-kafka Maven In Spring for Apache Kafka, unbounded delegate cache keyed on user-controlled, potentially malicious selector header CVE-2026-41726 Fix available 6.5 MediumJune 9, 2026
• org.springframework.kafka:spring-kafka Maven Java Deserialization vulnerability in Spring-Kafka When Improperly Configured CVE-2023-34040 Public exploitFix available 5.3 MediumAugust 24, 2023