Vmware Spring For Apache Kafka vulnerabilities

• spring for apache kafka, vmware spring for apache kafka +1 more In Spring for Apache Kafka, missing header validation in DeadLetterPublishingRecovererFactory enables denial of service via a poison-pill loop CVE-2026-59317 Fix available 6.5 MediumAugust 27, 2026
• spring for apache kafka, vmware spring for apache kafka +1 more In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packages CVE-2026-59278 6.5 MediumAugust 27, 2026
• spring for apache kafka, vmware spring for apache kafka, red hat fuse 7 +2 more +4 more In Spring for Apache Kafka, overly broad trusted-package matching in header mappers exposes JDK classes to deserialization CVE-2026-41731 Fix available 8.1 HighJune 9, 2026
• spring for apache kafka, vmware spring for apache kafka +1 more In Spring for Apache Kafka, forged retry topic headers subvert retry routing and backoff behavior CVE-2026-41727 Fix available 6.5 MediumJune 9, 2026
• spring for apache kafka, vmware spring for apache kafka +1 more In Spring for Apache Kafka, unbounded delegate cache keyed on user-controlled, potentially malicious selector header CVE-2026-41726 Fix available 6.5 MediumJune 9, 2026
• spring for apache kafka, vmware spring for apache kafka +1 more Java Deserialization vulnerability in Spring-Kafka When Improperly Configured CVE-2023-34040 Public exploitFix available 5.3 MediumAugust 24, 2023