Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Spring for Apache Kafka — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Spring for Apache Kafka, with AI-generated Chinese analysis, references, and POCs.

Vendor: Spring

CVE IDTitleCVSSSeverityPublished
CVE-2026-41731 In Spring for Apache Kafka, overly broad trusted-package matching in header mappers exposes JDK classes to deserialization CWE-502 8.1 High2026-06-09
CVE-2026-41727 In Spring for Apache Kafka, forged retry topic headers subvert retry routing and backoff behavior CWE-20 6.5 Medium2026-06-09
CVE-2026-41726 In Spring for Apache Kafka, unbounded delegate cache keyed on user-controlled, potentially malicious selector header CWE-770 6.5 Medium2026-06-09
CVE-2023-34040 Java Deserialization vulnerability in Spring-Kafka When Improperly Configured CWE-502 5.3 Medium2023-08-24

All 4 known CVE vulnerabilities affecting Spring for Apache Kafka with full Chinese analysis, references, and POCs where available.