SF
Product
Spring for Apache Pulsar
by Spring · last CVE Jun 9, 2026
1
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch

Add Spring for Apache Pulsar to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-41732
8.1
0%
Jun 9
In Spring for Apache Pulsar, overly broad trusted-package matching in header mapper exposes JDK classes to deserialization
Affected: 2.0.0 before 2.0.5.1; 1.2.0 before 1.2.17.1; 1.1.0 before 1.1.18
Showing 1