Spring Spring for Apache Pulsar

• CVE-2026-41732 High 8.1 In Spring for Apache Pulsar, overly broad trusted-package matching in header mapper exposes JDK classes to deserialization 0.3%