Michelle let us know about the following story on techtarget

"A recent security assessment of an application by Ounce Labs has resulted in the discovery of two vulnerabilities that can affect Java Web applications that use the Spring Framework.

Spring has been downloaded more than 5 million times to date, which means the security vulnerabilities identified could affect countless companies that use this framework.

SpringSource has also posted an FAQ on its site to help users determine if they're at risk and what to do to prevent exploitation. "

Article Link: http://searchsoftwarequality.techtarget.com/news/article/0,289142,sid92_gci1321417,00.html