VYPR

JsonKafkaHeaderMapper

by Apache

Source repositories

CVEs (1)

  • CVE-2026-41731HigJun 10, 2026
    risk 0.46cvss 8.1epss 0.01

    JsonKafkaHeaderMapper and the deprecated DefaultKafkaHeaderMapper matched type headers against trusted packages using a prefix check, meaning that trusting any package implicitly trusted all of its subpackages. Combined with Jackson's default bean deserialization, a producer…