Get a Demo

Let's Patch It!

Book a short call with one our specialists, we'll walk you through how Endor Patches work, and ask you a few questions about your environment (like your primary programming languages and repository management). We'll also send you an email right after you fill out the form, feel free to reply with any questions you have in advance!

Patch

org.springframework.cloud:spring-cloud-gateway-server 3.1.0

Back to all
Package Version

org.springframework.cloud:spring-cloud-gateway-server 3.1.0

Github Repository

Package Version Scores

Overall
0
/10
Security
4
Activity
9
Popularity
8
Quality
6
All Factors
Security
Activity
Popularity
Code Quality
Quality
Pull Requests from Bots
Pull requests from bot accounts indicate that the project is using automation for development tasks.
Quality
Pull Requests from Bots
Pull requests from bot accounts indicate that the project is using automation for development tasks.

Endor Patches

Patch Name
CVEs fixed
Lines of Code Changed
671c0733e67ac541bb90779b
CVEs Fixed
C
2
H
2
+1289
-25

Vulnerabilities Fixed

Cve Name
CVE ID
Severity
Spring Cloud Gateway vulnerable to Code Injection when Gateway Actuator endpoint enabled, exposed, unsecured
CVE-2022-22947
Critical
Spring Expression language property modification using Spring Cloud Gateway Server WebFlux
CVE-2025-41243
Critical
Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies
CVE-2025-41235
High
Spring Cloud Gateway Server Webflux is vulnerable to Expression Language Injection
CVE-2025-41253
High

Get Your First 3 Patches Free

Fix Without Upgrading
Detect compatible fix
Apply safe remediation
Fix with a single pull request

References

Basic Information

Ecosystem
Release Date
April 29, 2026
LINES OF CODE CHANGED
+1289
-25
-
on latest patch
License
Patch Available

Get Your First 3 Patches Free

Secure your app without upgrading.
Fix Without Upgrading