HeroDevs
Visit NES for Spring Home Page

Spring Cloud Gateway 3.1.x Release Notes

6 versions

Comprehensive release notes and changelog for Spring Cloud Gateway 3.1.x, including security patches, bug fixes, and feature updates across all supported versions.

Oct 17, 2025
Latest: 3.1.15
7 Patched Vulnerabilities
VEX Statements

October 2025

3.1.15

Released Oct 17, 2025
CVE-2025-41253
Full Version: 
3.1.9-spring-cloud-gateway-3.1.15

Bug Fixes

  • This patches the environment modification vulnerability in Spring Cloud Gateway Server (CVE-2025-41253).

September 2025

3.1.14

Released Sep 10, 2025
CVE-2025-41243
Full Version: 
3.1.9-spring-cloud-gateway-3.1.14

Bug Fixes

  • This patches the environment modification vulnerability in Spring Cloud Gateway Server (CVE-2025-41243).

August 2025

3.1.13

Released Aug 25, 2025
Full Version: 
3.1.9-spring-cloud-gateway-3.1.13

Dependency Upgrades

  • Spring Cloud Build (NES) 3.1.9-spring-cloud-build-3.1.12
  • Spring Cloud CircuitBreaker (NES) 2.1.8-spring-cloud-circuitbreaker-2.1.11
  • Spring Cloud Commons (NES) 3.1.9-spring-cloud-commons-3.1.12

May 2025

3.1.12

Released May 30, 2025
CVE-2025-41235
Full Version: 
3.1.9-spring-cloud-gateway-3.1.12

Bug Fixes

  • This patches the Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies vulnerability (CVE-2025-41235). X-Forwarded-*andForwarded` headers are disabled by default. If your application relies on these headers, you must configure trusted proxies after upgrading. Use the following settings to specify the proxies whose headers you trust using the following configuration:
    • For Spring Cloud Gateway Server: spring.cloud.gateway.trusted-proxies=10\.0\.0\..*
    • For Spring Cloud Gateway Server MVC: spring.cloud.gateway.mvc.trusted-proxies=10\.0\.0\..*

February 2025

3.1.11

Released Feb 24, 2025
Full Version: 
3.1.9-spring-cloud-gateway-3.1.11

Notes

  • Publish Spring Cloud Gateway under the org.springframework.cloud group ID instead of com.herodevs.nes.springframework.cloud

Dependency Upgrades

  • Spring Cloud Build (NES): 3.1.9-spring-cloud-build-3.1.11
  • Spring Cloud Circuit Breaker (NES): 2.1.8-spring-cloud-circuitbreaker-2.1.10
  • Spring Cloud Commons (NES): 3.1.9-spring-cloud-commons-3.1.11

December 2024

3.1.10

Released Dec 23, 2024
Full Version: 
3.1.9-spring-cloud-gateway-3.1.10

Notes

  • This release originates from the open‑source Spring Cloud Gateway repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Cloud Gateway 3.1.9. Full Version: 3.1.9-spring-cloud-gateway-3.1.10

Stay in the loop

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.