On behalf of the community, I am pleased to announce that the Service Release 3 (SR3) of the Spring Cloud Hoxton Release Train is available today. The release can be found in Maven Central. You can check out the Hoxton release notes for more information.
Spring Cloud Config contains fixes for CVE-2020-5405.
This milestone was primarily a bugfix release.
Please see the Hoxton.SR3 Github Project for all issues closed.
This milestone release is built with Spring Boot 2.2.5.RELEASE.