n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.

{
                    "product": "Spring Framework",
                    "vendor": "n/a",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "Spring Framework versions 5.3.X prior to 5.3.17+ and all old and unsupported versions"
                        }
                    ]
                }