Spring Security fixes CVE-2025-41248/41249

Spring Security and Spring Framework Release Fixes for CVE-2025-41248 and CVE-2025-41249 #Spring Blog The Spring Security and Spring Framework teams have collaborated to release fixes for the following CVEs. Both of these CVE reports pertain to vulnerabilities that may be encountered when using security annotations on methods within type hierarchies with a parameterized super type with unbounded generics. See the individual CVE reports for further details. The Spring Security 6.4.10 and 6.5.4 open source releases address CVE-2025-41248…

link