org.springframework.statemachine:spring-statemachine-kryo vulnerabilities (Maven)

1 vulnerability.

• org.springframework.statemachine:spring-statemachine-kryo Maven Spring Statemachine's Kryo-based persistence backends deserialize persisted state-machine contexts without enforcing a class allowlist CVE-2026-41862 Fix available 8.8 HighJune 23, 2026