CVE-2026-41855

CVE-2026-41855 affects Spring Framework components MappingJackson2MessageConverter and JacksonJsonMessageConverter in untrusted JMS environments, enabling arbitrary class instantiation and gadget deserialization that could lead to unauthorized actions. Affected versions include Spring Framework 7...