There's a new-zero vulnerability just disclosed in the Spring Core Java framework, dubbed "Spring4Shell", which could result in unauthenticated remote code execution.
Users of affected versions should upgrade to 3.1.7, 3.2.3. No other steps are necessary. Releases that have fixed this issue include:
Spring Cloud Function
3.1.7
3.2.3
CVE-2022-22963: Spring Expression Resource Access Vulnerability [tanzu.vmware.com]
