Skip to content

SecurityAnnotationScanner's method comparison should use .equals #17143

Closed
@jzheaux

Description

@jzheaux
Contributor

When using == to look for a method match, it may not account for technologies like AspectJ that weave behavior around a method at compile time.

Activity

self-assigned this
on May 19, 2025
added
in: coreAn issue in spring-security-core
in: aspectsAn issue in spring-security-aspects
and removed on May 19, 2025
added this to the 6.4.6 milestone on May 19, 2025
added 2 commits that reference this issue on May 19, 2025
c972de5
bf2aaa1
Alina-Podoba

Alina-Podoba commented on Jun 13, 2025

@Alina-Podoba

Hi, thanks for the clarification and the fix.
Just to confirm- is spring-security-core considered affected by CVE-2025-41232 as well?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

in: aspectsAn issue in spring-security-aspectsin: coreAn issue in spring-security-coretype: bugA general bug

Type

No type

Projects

No projects

Relationships

None yet

    Development

    No branches or pull requests

      Participants

      @jzheaux@Alina-Podoba

      Issue actions

        SecurityAnnotationScanner's method comparison should use .equals · Issue #17143 · spring-projects/spring-security