Require exact package match for trusted header types #4496

Closed

Labels

for: backport-to-3.3.xfor: backport-to-4.0.xstatus: backportedtype: bug

Milestone

opened

See: https://spring.io/security/cve-2026-41731

Metadata

Assignees

No one assigned

Labels

for: backport-to-3.3.xfor: backport-to-4.0.xstatus: backportedtype: bug

Type

No type

Fields

No fields configured for issues without a type.

Projects

No projects

Milestone

4.1.0

Relationships

None yet

Development

No branches or pull requests