CVE-2026-1323 — The extension fails to properly define allowed classes used when deserializing transport failure metadata. An attacker may exploit this to execute untrusted serialized code. Note that an active exploi — CVE Database · The Intelligence Room