CVE-2026-73911: Helidon Serialization Config Classpath Discovery

Loading serialization filter properties via ClassLoader.getResources() does not support single-jar/fat-jar metadata discovery in Helidon, which can lead to omitted JEP 290 filter configurations.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Java
greprules fetch cve-2026-73911-helidon-serialization-config-classpath-discovery --engine opengrep

Description

Loading serialization filter properties via ClassLoader.getResources() does not support single-jar/fat-jar metadata discovery in Helidon, which can lead to omitted JEP 290 filter configurations.