Spring Boot Improper Input Validation Vulnerability - CVE-2025-22235

EndpointRequest.to()creates a matcher for null/if the actuator endpoint for which the EndpointRequesthas been created is disabled or not exposed. Your application may be affected by this if all the following conditions are met: You use Spring Security EndpointRequest.to()has been used in a Spring Security chain configuration The endpoint which EndpointRequestreferences is disabled or not exposed via web Your application handles requests to /nulland this path needs