Red Hat Fuse 7/spring-kafka
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| In Spring for Apache Kafka, unbounded delegate cache keyed on user-controlled, potentially malicious selector header | org.springframework.kafka:spring-kafkaRed Hat Fuse 7/spring-kafka | MavenRed Hat | Medium | Fix reported | |
| In Spring for Apache Kafka, overly broad trusted-package matching in header mappers exposes JDK classes to deserialization | org.springframework.kafka:spring-kafkaRed Hat Fuse 7/spring-kafka | MavenRed Hat | High | Fix reported | |
| org.springframework.kafka/spring-kafka: Spring for Apache Kafka: Server-Side Request Forgery via untrusted Java types in header mappers | Red Hat Fuse 7/spring-kafka | Red Hat | Medium | No fix reported | |
| org.springframework.kafka/spring-kafka: Spring for Apache Kafka: Denial of Service via missing header validation | Red Hat Fuse 7/spring-kafka | Red Hat | Medium | No fix reported |