VYPR

Kafka

by Spring Projects

CVEs (1)

  • CVE-2026-59317MedAug 27, 2026
    risk 0.42cvss 6.5epss 0.00

    DeadLetterPublishingRecovererFactory reads the retry_topic-original-timestamp header from an inbound ConsumerRecord and passes its raw bytes directly to new BigInteger(header.value()) with no length or format validation. Spring for Apache Kafka 4.1.0 Spring for Apache Kafka…