conductor-oss / conductor-oss/java-sdk

[CVE-2025-41249] HIGH: spring-core 6.1.16 - Annotation Detection Vulnerability

Open
#85 1 comment 0 reactions 0 assignees View on GitHub
security vulnerability
Dominant language
Java
Stars
12
Forks
10
Avg merge
2d 8h
Merged PRs (30d)
4

Description

## Vulnerability Report

| Field | Value |
|-------|-------|
| **CVE** | `CVE-2025-41249` |
| **Severity** | **HIGH** |
| **Library** | `org.springframework:spring-core` |
| **Source** | `workers.jar` |
| **Installed Version** | 6.1.16 |
| **Fixed Version** | 6.2.11 |

### Summary

Spring Framework Annotation Detection Vulnerability.

### References

- [NVD Entry](https://avd.aquasec.com/nvd/cve-2025-41249)

---
*Filed from container vulnerability scan of `workers.jar`*

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.