Spring security advisory (AV26-592)

Serial number: AV26-592
Date: June 12, 2026

Between June 10 and 11, 2026, Spring published security advisories to address vulnerabilities in the following products:

  • Spring Cloud Sleuth – versions 3.1.0 to 3.1.13
  • Spring Statemachine – multiple versions
  • Spring Cloud Gateway – multiple versions
  • Spring Integration – multiple versions
  • Spring for GraphQL – multiple versions

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

Date modified: