[CVE-2025-41249] HIGH: spring-core 6.1.16 - Annotation Detection Vulnerability

[nthmost-orkes]

Vulnerability Report

Field	Value
CVE	CVE-2025-41249
Severity	HIGH
Library	org.springframework:spring-core
Source	workers.jar
Installed Version	6.1.16
Fixed Version	6.2.11

Summary

Spring Framework Annotation Detection Vulnerability.

References

• NVD Entry

---

Filed from container vulnerability scan of workers.jar

[nthmost-orkes]

Fix PRs:

• Security: Bump Spring Boot and pin vulnerable transitive dependencies conductor#800 (Spring Boot 3.3.5 -> 3.3.11, updates spring-core via BOM)
• Bump Spring Boot from 3.1.4 to 3.3.11 conductor-task-update#1 (Spring Boot 3.1.4 -> 3.3.11)