Spring Blog

We have released Spring Security OAuth 2.5.2 to address the following CVE report.

• CVE-2022-22969: Denial-of-Service (DoS) in spring-security-oauth2

This vulnerability exposes OAuth 2.0 Client applications only.

Please review the information in the CVE report and upgrade immediately.