Fix CVE-2026-22732 (Spring Security header suppression)

Proprietary

Remediates CVE-2026-22732 by the cheapest route available to each project: a patch upgrade of Spring Security where an open-source fix exists, and otherwise a BeanPostProcessor that makes Spring Security write its security headers eagerly.

org.openrewrite.java.security.spring.cve202622732.FixSpringSecurityHeaderSuppression

mod run . --recipe=org.openrewrite.java.security.spring.cve202622732.FixSpringSecurityHeaderSuppression

Install it once from Recipe actions, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.