org.springframework.security/spring-security-aspects vulnerabilities

Latest org.springframework.security/spring-security-aspects CVEs

Newest publication first

1. CVE-2025-41232 CVE-2025-41232: Spring Security authorization bypass for method security annotations on private methods

   Published 2025-05-21

   Critical·CVSS 9.1

   Spring Security Aspects may not correctly locate method security annotations on private methods. This can cause an authorization bypass. Your application may be affected by this if the following are true: You are using @EnableMethodSecurity(mode=ASPECTJ) and spring-security-aspec...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.