CVE-2026-73930: Helidon Serial Filter Flat Resource Lookup

Direct classpath resource lookup for serialization filter configurations can lead to missing or overwritten JEP 290 filter patterns when packaged in single/fat JARs. Use MetadataDiscovery to aggregate module-scoped filter definitions.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Java
greprules fetch cve-2026-73930-helidon-serial-filter-flat-resource-lookup --engine opengrep

Description

Direct classpath resource lookup for serialization filter configurations can lead to missing or overwritten JEP 290 filter patterns when packaged in single/fat JARs. Use MetadataDiscovery to aggregate module-scoped filter definitions.