VYPR

JsonKafkaHeaderMapper

by Apache Kafka

CVEs (1)

  • CVE-2026-41731HigJun 10, 2026
    risk 0.53cvss 8.1epss

    JsonKafkaHeaderMapper and the deprecated DefaultKafkaHeaderMapper matched type headers against trusted packages using a prefix check, meaning that trusting any package implicitly trusted all of its subpackages. Combined with Jackson's default bean deserialization, a producer…