org.springframework.kafka:spring-kafka vulnerabilities (Root)

2 vulnerabilities.

• org.springframework.kafka:spring-kafka Root In Spring for Apache Kafka, overly broad trusted-package matching in header mappers exposes JDK classes to deserialization CVE-2026-41731 Fix available 8.1 HighJune 9, 2026
• org.springframework.kafka:spring-kafka Root In Spring for Apache Kafka, unbounded delegate cache keyed on user-controlled, potentially malicious selector header CVE-2026-41726 Fix available 6.5 MediumJune 9, 2026