Entrar Obtener clave API

Vulnerabilidades de vmware spring for apache pulsar (CVE)

Registros CVE publicados para vmware spring for apache pulsar, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

1 resultados

8.1Alta

CVE-2026-41732 hace 5 meses

In Spring for Apache Pulsar, overly broad trusted-package matching in header mapper exposes JDK classes to deserialization

Spring Spring for Apache Pulsar

JsonPulsarHeaderMapper matched type headers against trusted packages using a prefix check, meaning that trusting any package implicitly trusted all of its subpackages. Additionally, an empty trusted-packages configuration fell back to trusting all packages ra…