org.springframework.kafka:spring-kafka
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Spring for Apache Kafka: Improper Validation of Retry Topic Header Values Leads to Retry Sequence Manipulation | org.springframework.kafka:spring-kafka | Maven | Medium | Fix reported | |
| In Spring for Apache Kafka, unbounded delegate cache keyed on user-controlled, potentially malicious selector header | org.springframework.kafka:spring-kafkaRed Hat Fuse 7/spring-kafka | MavenRed Hat | Medium | Fix reported | |
| In Spring for Apache Kafka, overly broad trusted-package matching in header mappers exposes JDK classes to deserialization | org.springframework.kafka:spring-kafkaRed Hat Fuse 7/spring-kafka | MavenRed Hat | High | Fix reported | |
| Spring-Kafka has Java Deserialization vulnerability When Improperly Configured | org.springframework.kafka:spring-kafka | Maven | High | Fix reported |