org.springframework.cloud:spring-cloud-gateway-server vulnerabilities (Maven)

2 vulnerabilities.

• org.springframework.cloud:spring-cloud-gateway-server Maven Spring Cloud Gateway Webflux SpEL Injection Vulnerability Allowing Exposure of Environment Variables CVE-2025-41253 Fix available 7.5 HighOctober 16, 2025
• org.springframework.cloud:spring-cloud-gateway-server Maven CVE-2025-41235: Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies CVE-2025-41235 Fix available 8.6 HighMay 30, 2025