[High] CVE-2026-41731 – JsonKafkaHeaderMapper and the deprecated DefaultKafkaHeaderMapper matched type h...
High CVE-2026-41731 JsonKafkaHeaderMapper and the deprecated DefaultKafkaHeaderMapper matched type headers against trusted packages using a prefix check, meaning that trusting any package implicitly trusted all of its subpackages. Combined with Jackson's default bean deserialization, a producer...