{"action":"Upgrade org.springframework.cloud:spring-cloud-gateway-server-webflux to 4.2.5 (4.2.x) or 4.3.1 (4.3.x) or later.","affected":[{"introduced":"3.1.0","last_affected":"3.1.10"},{"introduced":"4.0.0","last_affected":"4.1.10"},{"fixed":"4.2.5","introduced":"4.2.0"},{"fixed":"4.3.1","introduced":"4.3.0"}],"component":"org.springframework.cloud:spring-cloud-gateway-server-webflux","cve_ids":["CVE-2025-41243"],"ecosystem":"Maven","epss":0.03674,"exploited":false,"fixed_versions":["4.2.5","4.3.1"],"ghsa_id":"GHSA-q2cj-h8fw-q4cc","id":"tcs_01M5N98CPDGX3G6ENEAF0JHAVH","modified_at":"2025-09-16T20:42:27.178022Z","published_at":"2025-09-16T15:32:37Z","references":["https://osv.dev/vulnerability/GHSA-q2cj-h8fw-q4cc","https://nvd.nist.gov/vuln/detail/CVE-2025-41243","https://spring.io/security/cve-2025-41243"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-q2cj-h8fw-q4cc","url":"https://osv.dev/vulnerability/GHSA-q2cj-h8fw-q4cc"}],"summary":"Spring Expression language property modification using Spring Cloud Gateway Server WebFlux"}