CVE-2026-73927: Helidon Serial Config Classpath Lookup

Helidon serialization configuration should use MetadataDiscovery rather than direct ClassLoader lookup to ensure complete filter discovery.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Java
greprules fetch cve-2026-73927-helidon-serial-config-classpath-lookup --engine opengrep

Description

Helidon serialization configuration should use MetadataDiscovery rather than direct ClassLoader lookup to ensure complete filter discovery.