Spring Security (< 5.7.22, 5.8.24, 6.3.15, 6.4.15, 6.5.9, 7.0.4)

A vulnerability in Spring Security versions < 7.0.4 allows attackers to bypass security header injection by manipulating the Content-Length header, leading to the absence of X-Frame-Options and other security headers.