CVE-2026-73875: Helidon Serial Filter Classpath Discoverycve-2026-73875-helidon-serial-filter-classpath-discovery
Deserialization filter configuration files are loaded directly via ClassLoader.getResources(), which may fail to aggregate configuration across single/fat JAR packaging layouts, leading to unenforced filters.