This patches the Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies vulnerability (CVE-2025-41235). X-Forwarded-*andForwarded` headers are disabled by default. If your application relies on these headers, you must configure trusted proxies after upgrading. Use the following settings to specify the proxies whose headers you trust using the following configuration:
- For Spring Cloud Gateway Server: spring.cloud.gateway.trusted-proxies=10\.0\.0\..*
- For Spring Cloud Gateway Server MVC: spring.cloud.gateway.mvc.trusted-proxies=10\.0\.0\..*

February 2025

Released on Feb 24, 2025

Full Version:

3.1.9-spring-cloud-gateway-3.1.11

Publish Spring Cloud Gateway under the org.springframework.cloud group ID instead of com.herodevs.nes.springframework.cloud

December 2024

Released on Dec 23, 2024

Full Version:

3.1.9-spring-cloud-gateway-3.1.10

This release originates from the open‑source Spring Cloud Gateway repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Cloud Gateway 3.1.9.

~/herodevs-spring-framework-support

When official support ends, we're just getting started.

New releases published regularly — check back often for the latest security updates

$ cat features.txt