Official announcement, a better remediation is proposed: https://spring.io/blog/2022/03/31/spring-framework-rce-early...

A new spring release should come out today.