CVE-2025-41249 - Spring Framework - Annotation Detection Vulnerability

Products

• CA API Gateway

Issue/Introduction

Is the API Gateway affected by this vulnerability CVE-2025-41249?

Environment

Gateway 11.1.2

Resolution

The gateway is not affected by this vulnerability even though spring framework package is installed.  As noted in the spring website, this vulnerability does not affect if the @EnableMethodSecurity feature is not used.

The gateway does not use this feature and hence this vulnerability does not affect the gateway.