{"action":"Upgrade org.springframework:spring-core to 6.2.11 or later.","affected":[{"introduced":"5.3.0","last_affected":"5.3.44"},{"introduced":"6.0.0","last_affected":"6.1.22"},{"fixed":"6.2.11","introduced":"6.2.0"}],"component":"org.springframework:spring-core","cve_ids":["CVE-2025-41249"],"ecosystem":"Maven","epss":0.00478,"exploited":false,"fixed_versions":["6.2.11"],"ghsa_id":"GHSA-jmp9-x22r-554x","id":"tcs_01M5N9386BY95GC4G60VJ21CTH","modified_at":"2026-09-10T03:50:28.526913629Z","published_at":"2025-09-16T15:32:34Z","references":["https://osv.dev/vulnerability/GHSA-jmp9-x22r-554x","https://nvd.nist.gov/vuln/detail/CVE-2025-41249","https://github.com/spring-projects/spring-framework/issues/35342","https://github.com/spring-projects/spring-framework/commit/6d710d482a6785b069e35022e81758953afc21ff","https://github.com/spring-projects/spring-framework","https://github.com/spring-projects/spring-framework/releases/tag/v6.2.11","https://spring.io/security/cve-2025-41249"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-jmp9-x22r-554x","url":"https://osv.dev/vulnerability/GHSA-jmp9-x22r-554x"}],"summary":"Spring Framework annotation detection mechanism may result in improper authorization"}