The vulnerability cve-2010-3700 has been announced in Spring Security.

Users who may be vulnerable are advised to update to the newly announced releases.