https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T15:55:10.452564+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-41726 CVE-2026-41726 — In Spring for Apache Kafka, unbounded delegate cache keyed on user-controlled, potentially malicious selector header 2026-10-06T15:55:10.467989+00:00

Affected: Spring for Apache Kafka

When an application opts into DelegatingDeserializer, a producer can grow the consumer's heap without bound by sending records with unique random spring.kafka.serialization.selector header values, eventually causing GC thrash and OutOfMemoryError.

Affected versions: Spring for Apache Kafka 4.0.0 through 4.0.5; 3.3.0 through 3.3.15; 3.2.0 through 3.2.13; 2.9.0 through 2.9.13; 2.8.0 through 2.8.11.