Spring HATEOAS 3.1 GA, 3.0.7, and 2.5.3 released

Spring HATEOAS releases three versions addressing security vulnerabilities and maintenance improvements.

• •Spring HATEOAS 3.1 GA includes dependency updates and improvements to link parsing
• •CVE-2026-41006 addresses Collection+JSON/UBER deserializers not honoring Jackson configuration
• •CVE-2026-41007 fixes heap exhaustion vulnerability caused by unbounded internal caching
• •Versions 3.0.7 and 2.5.3 also released with the same security patches

This summary was automatically generated by AI based on the original article and may not be fully accurate.