---
title: Cybersecurity Notice on ECG Software Alpaca regarding Spring - ECG
description: "Updated 2022-05-04: Noting Alpaca 9.1.4 release   ECG has reviewed the cybersecurity vulnerability CVE-2022-22965 in Spring, announced March 31, 2022 as it"
---

[VoIP & Network Technology Latest News & Insights | ECG](https://www.ecg.co/blog)

# [Cybersecurity Notice on ECG Software Alpaca regarding Spring - ECG](https://www.ecg.co/blog/165-cybersecurity-notice-on-ecg-software-alpaca-regarding-spring-vulnerabilities-updated)

 Written by [ECG Team](https://www.ecg.co/blog/author/ecg-team) | Mar 31, 2022, 4:00:00 AM

**Updated 2022-05-04: Noting Alpaca 9.1.4 release**

 

 ECG has reviewed the [cybersecurity vulnerability CVE-2022-22965 in Spring, announced March 31, 2022](https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement) as it relates to the Alpaca software. All versions of Alpaca are not vulnerable, based on the information given in the announcement. 

[Alpaca 9.1.4](https://www.ecg.co/guides/alpaca/9.1/releasenotes) was released May 4, 2022 to resolve vulnerabilities due to [CVE-2022-22947](https://nvd.nist.gov/vuln/detail/CVE-2022-22947).

ECG continues to monitor for vulnerabilities, and will upgrade components in the Alpaca Software-Bill-of-Materials to ensure Alpaca is free of vulnerabilities.

[View full post](https://www.ecg.co/blog/165-cybersecurity-notice-on-ecg-software-alpaca-regarding-spring-vulnerabilities-updated)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "ECG Team"
  },
  "dateModified" : "2024-03-25T07:03:56.006Z",
  "datePublished" : "2022-03-31T04:00:00Z",
  "headline" : "Cybersecurity Notice on ECG Software Alpaca regarding Spring",
  "image" : {
    "@type" : "ImageObject",
    "height" : 277,
    "url" : "https://9353907.fs1.hubspotusercontent-na1.net/hubfs/9353907/Imported_Blog_Media/regular_AdobeStock_128801794-1.jpeg",
    "width" : 750
  },
  "mainEntityOfPage" : "https://www.ecg.co/blog/165-cybersecurity-notice-on-ecg-software-alpaca-regarding-spring-vulnerabilities-updated",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "Blog"
  }
}
```