We have published CVE-2024-38819 and CVE-2024-38820, see spring.io/blog/2024/10/1…

Spring Framework has published releases that contain a fix for CVE-2024-38816: Path traversal vulnerability in functional web frameworks.

spring.io/blog/2024/09/1…

Spring Framework 6.2.0-RC1 is now available, with new features, bug fixes, and documentation improvements.

spring.io/blog/2024/09/1…

Spring Framework 6.1.13 is now available, with minor enhancements, bug fixes, and documentation improvements.

spring.io/blog/2024/09/1…

Another milestone for Spring Framework 6.2. Check out what's new in this blog post from @simonbasle:

spring.io/blog/2024/08/1…

Spring Framework 6.1.12, 6.0.23, ad 5.3.39 have been released:

spring.io/blog/2024/08/1…

A reminder that OSS support for 5.3.x and 6.0.x ends at the end of this month, so those releases are meant to be the last one in their respective lines.

In preparation for the first milestone of @springboot 3.4 we've just released another Spring Framework milestone to address a backward compatibility issue.

spring.io/blog/2024/07/1…

Next up is the fifth milestone of @springframework 6.2

spring.io/blog/2024/07/1…

Improved Jetty support and early support for rendering multiple views (fragments)!

Stay tuned next week, in particular for the first milestone of Spring Boot 3.4 that integrates this.

It's release day on the @springframework team.

Spring Framework 6.1.11 is available now, thanks again to everyone who contributed.

spring.io/blog/2024/07/1…

It's release day on the @springframework team with 6.2.0-M4, 6.1.9, 6.0.22, 5.3.37.

spring.io/blog/2024/06/1…
spring.io/blog/2024/06/1…

"Spring Framework 6.2.0-M1: all the little things" blog post by @snicoll.

spring.io/blog/2024/04/1…

"Kicking off the Spring Framework 6.2 milestone phase" blog post by @springjuergen.

spring.io/blog/2024/04/1…

Spring Framework 6.1.6, 6.0.19, and 5.3.34 are available now including fixes for CVE-2024-22262.

spring.io/blog/2024/04/1…

Let's go! The first milestone of @springframework 6.2 is out spring.io/blog/2024/04/1…

The @springframework team has been very busy cleaning up the issue tracker since last August.

6.2.0-M1 has a large number of small, highly-voted enhancement requests. In this post, I am walking you through some of them spring.io/blog/2024/04/1…

Spring Framework 6.1.6, 6.0.19 and 5.3.34 available now. Please upgrade at your earliest convenience as it contains a fix for CVE-2024-22262

spring.io/blog/2024/04/1…

Announcing a triple release of versions 6.1.5, 6.0.18 and 5.3.33, including fixes for CVE-2024-22259.

Please, read the blog post:
spring.io/blog/2024/03/1…

Support timeline announcement for Spring Framework 6.0.x and 5.3.x.

spring.io/blog/2024/03/0…

CVE-2024-22243 has been published for a URL parsing with Domain Validation vulnerability. Please, read spring.io/security/cve-2….

It's release day on the @springframework team! Spring Framework 6.1.3 and 6.0.16 are available now. Stay tuned for follow-up Spring Boot releases next week.

spring.io/blog/2024/01/1…