CGA-8r49-hfc8-c22c

This CVE is disputed by upstream Spring Framework developers: https://github.com/spring-projects/spring-framework/issues/24434#issuecomment-582313417. The Spring Framework provides an option to invoke ObjectInputStream (along with documented warnings). The presence of this capability in the Spring Framework doesn't represent a vulnerability.

Data serialization is performed by the Jenkins framework, nothing specific to this application.