Spring Statemachine vulnerabilities

• broadcom spring statemachine, spring statemachine +1 more Spring Statemachine's Kryo-based persistence backends deserialize persisted state-machine contexts without enforcing a class allowlist CVE-2026-41862 Fix available 8.8 HighJune 23, 2026