CVE-2026-59317

Spring for Apache Kafka is vulnerable to a denial of service via a poison-pill loop caused by missing header validation in DeadLetterPublishingRecovererFactory . The component reads the retry_topic-original-timestamp header from an inbound ConsumerRecord and passes its raw bytes directly to new B...