On March 30, 2022, a critical remote code execution (RCE) vulnerability was found in the Spring Framework. This vulnerability is another example of why securing the software supply chain is important to open source.