CVE-2025-22234: Spring Security BCryptPasswordEncoder maximum password length breaks timing attack mitigation

The post discusses CVE-2025-22234, a vulnerability related to the maximum password length in BCryptPasswordEncoder, which affects its timing attack mitigation in Spring Security.