# ReportServer and CVE-2022-22965 (Spring) Information

**URL:** <https://forum.reportserver.net/t/reportserver-and-cve-2022-22965-spring-information/1513>\
**Category:** ReportServer (EN)\
**Created:** [April 4, 2022, 9:14am UTC](https://forum.reportserver.net/t/reportserver-and-cve-2022-22965-spring-information/1513 "2022-04-04T09:14:19Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![IF\_Eduardo](https://forum.reportserver.net/letter_avatar_proxy/v4/letter/i/94ad74/32.png) [@IF\_Eduardo](https://forum.reportserver.net/u/IF_Eduardo)\
**Post date:** [April 4, 2022, 9:14am UTC](https://forum.reportserver.net/t/reportserver-and-cve-2022-22965-spring-information/1513/1 "2022-04-04T09:14:19Z")

</div>

Hi,

as many of you probably heard, the Spring framework has this critical security issue: [url= [https://www.cisa.gov/uscert/ncas/current-activity/2022/04/01/spring-releases-security-updates-addressing-spring4shell-and](https://www.cisa.gov/uscert/ncas/current-activity/2022/04/01/spring-releases-security-updates-addressing-spring4shell-and)]CVE-2022-22965[/url].

ReportServer is not affected by this as of ReportServer 3.1.1. All previous versions are affected and should be upgraded immediately. We recommend to upgrade to the current ReportServer version (4.1.0 at the moment of writing).

Best regards,  
Your ReportServer Team