On behalf of the team and everyone who has contributed, I am pleased to announce that the Spring Cloud Gateway 3.1.10, 4.0.12, 4.1.8, 4.2.3, 4.3.0 are available now which fix CVE-2025-41235. See the CVE report for breaking changes.

Spring Cloud Gateway 4.0.12 is a commercial-only release and is not available in Maven Central.

Please refer to the releases page for more detail on what is included in each release.