org.springframework.statemachine:spring-statemachine-kryo
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Spring Statemachine's Kryo-based persistence backends deserialize persisted state-machine contexts without enforcing a class allowlist | org.springframework.statemachine:spring-statemachine-kryo | Maven | High | Fix reported |