org.springframework.boot:spring-boot-starter-websocket (>=1.1.11.release, <=1.1.12.release) potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.0.9.release)

org.springframework:spring-websocket MAVEN version 4.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.boot:spring-boot-starter-websocket =1.1.11.release,...