VYPR

Spring Kafka

by Spring Projects

Source repositories

CVEs (1)

  • CVE-2026-59317MedAug 27, 2026
    risk 0.42cvss 6.5epss

    DeadLetterPublishingRecovererFactory reads the retry_topic-original-timestamp header from an inbound ConsumerRecord and passes its raw bytes directly to new BigInteger(header.value()) with no length or format validation. Spring for Apache Kafka 4.1.0 Spring for Apache Kafka…