org.springframework.kafka:spring-kafka vulnerabilities (TuxCare)

3 vulnerabilities.

• org.springframework.kafka:spring-kafka TuxCare In Spring for Apache Kafka, missing header validation in DeadLetterPublishingRecovererFactory enables denial of service via a poison-pill loop CVE-2026-59317 Fix available 6.5 MediumAugust 27, 2026
• org.springframework.kafka:spring-kafka TuxCare In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packages CVE-2026-59278 6.5 MediumAugust 27, 2026
• org.springframework.kafka:spring-kafka TuxCare In Spring for Apache Kafka, forged retry topic headers subvert retry routing and backoff behavior CVE-2026-41727 Fix available 6.5 MediumJune 9, 2026