--- title: In Spring for Apache Kafka, SSRF via DNS resolution... description: A security advisory discloses a server-side request forgery vulnerability (CVE-2026-59278) in Spring for Apache Kafka, caused by DNS resolution triggered by... canonical: https://daily.dev/posts/in-spring-for-apache-kafka-ssrf-via-dns-resolution-triggered-by-untrusted-java-net-types-in-header--mk0ygsrfq twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packages | daily.dev og:description: A security advisory discloses a server-side request forgery vulnerability (CVE-2026-59278) in Spring for Apache Kafka, caused by DNS resolution triggered by... og:url: https://daily.dev/posts/in-spring-for-apache-kafka-ssrf-via-dns-resolution-triggered-by-untrusted-java-net-types-in-header--mk0ygsrfq og:image: https://api.daily.dev/og/posts/mK0yGsRFq.png og:image:alt: In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packages og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packages **[Spring](https://daily.dev/sources/spring)** · 1 min read · 1 upvotes · 0 comments ## Summary A security advisory discloses a server-side request forgery vulnerability (CVE-2026-59278) in Spring for Apache Kafka, caused by DNS resolution triggered by untrusted java.net types included in the header mapper's default trusted packages. The page content itself is minimal, mostly consisting of Broadcom's cookie policy notice rather than technical detail. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is the SSRF vulnerability in Spring for Apache Kafka's header mapper? A server-side request forgery vulnerability exists in Spring for Apache Kafka where untrusted java.net types included in the header mapper's default trusted packages can trigger unwanted DNS resolution, allowing an attacker to cause the application to make network requests to attacker-controlled destinations. Exact affected versions and remediation steps require checking the official advisory. _Teams running Spring Kafka in production can track advisories like this one on daily.dev to patch before exposure._ ## Similar posts on daily.dev - [In Spring for Apache Kafka, missing header validation in DeadLetterPublishingRecovererFactory enables denial of service via a poison-pill loop](https://daily.dev/posts/in-spring-for-apache-kafka-missing-header-validation-in-deadletterpublishingrecovererfactory-enable-zdxcjxc79) · Spring · 2 upvotes · 0 comments - [Cisco Unified CM SSRF Flaw Is Being Exploited to Drop Webshells](https://daily.dev/posts/cisco-unified-cm-ssrf-flaw-is-being-exploited-to-drop-webshells-hq2ceaoyv) · Latest Hacking News · 0 upvotes · 0 comments - [I Found a Critical SSRF Vulnerability That Could Have Exposed an Entire Server Here’s How](https://daily.dev/posts/i-found-a-critical-ssrf-vulnerability-that-could-have-exposed-an-entire-server-here-s-how-xgeshq0eo) · InfoSec Write-ups · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#java](https://daily.dev/tags/java) [View this post on daily.dev](https://daily.dev/posts/in-spring-for-apache-kafka-ssrf-via-dns-resolution-triggered-by-untrusted-java-net-types-in-header--mk0ygsrfq) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packages","url":"https://daily.dev/posts/in-spring-for-apache-kafka-ssrf-via-dns-resolution-triggered-by-untrusted-java-net-types-in-header--mk0ygsrfq","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/in-spring-for-apache-kafka-ssrf-via-dns-resolution-triggered-by-untrusted-java-net-types-in-header--mk0ygsrfq"},"datePublished":"2026-08-20T16:42:36.496Z","dateModified":"2026-09-13T21:34:55.677Z","description":"A security advisory discloses a server-side request forgery vulnerability (CVE-2026-59278) in Spring for Apache Kafka, caused by DNS resolution triggered by...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ff749d548af41095da8724da8d7ba5f9?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ff749d548af41095da8724da8d7ba5f9?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Spring","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Spring","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/spring","url":"https://daily.dev/sources/spring"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/in-spring-for-apache-kafka-ssrf-via-dns-resolution-triggered-by-untrusted-java-net-types-in-header--mk0ygsrfq","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,java","timeRequired":"PT1M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Spring","item":"https://daily.dev/sources/spring"},{"@type":"ListItem","position":3,"name":"In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packages"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/in-spring-for-apache-kafka-ssrf-via-dns-resolution-triggered-by-untrusted-java-net-types-in-header--mk0ygsrfq#faq","mainEntity":[{"@type":"Question","name":"What is the SSRF vulnerability in Spring for Apache Kafka's header mapper?","acceptedAnswer":{"@type":"Answer","text":"A server-side request forgery vulnerability exists in Spring for Apache Kafka where untrusted java.net types included in the header mapper's default trusted packages can trigger unwanted DNS resolution, allowing an attacker to cause the application to make network requests to attacker-controlled destinations. Exact affected versions and remediation steps require checking the official advisory. Teams running Spring Kafka in production can track advisories like this one on daily.dev to patch before exposure."}}]} ```