The Spring Cloud 2025.1.3 Release Train is now generally available, accessible from Maven Central, with release notes detailing further information. This release is built upon Spring Boot 4.0.8. Several significant changes and critical security fixes are included across various modules. Spring Cloud Circuitbreaker no longer uses the default TimeLimiterConfig in Resilience4JCircuitBreakerFactory. Spring Cloud Commons has fixed a CVE-2026-59284 vulnerability, upgraded Bouncycastle, and improved property configuration resets. Spring Cloud Config addresses multiple CVEs (2026-47836, 2026-47837, 2026-47894, 2026-59315) and now supports Git-style searchPaths in AWS S3. Spring Cloud Function resolves several CVEs (2026-59291, 2026-59297, 2026-59298, 2026-59299, 2026-59300, 2026-59301) related to file read, SSRF, header filtering, function poisoning, and sensitive data logging. Spring Cloud Gateway fixes CVE-2026-47879, which involved SSRF and native file access, and adds MVC retry backoff support. Spring Cloud Stream addresses CVEs (2026-59302, 2026-59303, 2026-59304, 2026-59305, 2026-59306) concerning sensitive data logging, cache size, content type caching, interceptor issues, and deserialization vulnerabilities. A table outlines the updated versions of various modules within this release. Feedback is encouraged via GitHub, Gitter, Stack Overflow, or Twitter. Instructions for integrating with Maven and Gradle are provided for community use.