Josh Cummings

Josh Cummings

Spring Security committer | Herriman, Utah

Josh has been a software engineer for over 15 years building enterprise applications across multiple industries. He has long been passionate about application security and loves opportunities to mentor and to learn from others about security awareness.

When Josh isn't hacking away at code, he is either running, playing basketball, camping, or reading a Brandon Sanderson novel.

Blog posts by Josh Cummings

Spring Security 6.3.0-RC1 is available now

Releases | April 18, 2024 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce that the release candidate of Spring Security 6.3 is released.

The 6.3 release brings several compelling features including

  • Long-term JDK serialization backward compatibility
  • New method security annotations and capabilities
  • Compromised password checking, and
  • OAuth 2.0 Token Exchange support

You can read more about each of these in the What's New section of the 6.3 documentation and also see the exhaustive list of of features across the 6.3 release in the release pages for 6.3.0-M1, 6.3.0-M2, 6.3.0-M3, and 6.3.0-RC1

Spring Security 5.6.12, 5.7.10, 5.8.5, 6.0.5, and 6.1.2 are available now, including fixes for CVE-2023-34034 and CVE-2023-34035

Releases | July 24, 2023 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce that the Spring Security 5.6.12, 5.7.10, 5.8.5, 6.0.5, and 6.1.2 are available now.

Please refer to the releases page for more detail on what is included in each release.

Those versions fix the following CVEs:

It is also important to remember that the 5.8 version of Spring Security is a special release designed to help you to migrate to Spring Security 6.0, therefore if you are planning to upgrade your applications, using that version combined with the special migration guide

Spring Security 5.7.3 and 5.6.7 available now

Releases | August 15, 2022 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Security 5.7.3 and 5.6.7 are available now. In both cases the releases are largely composed of dependency upgrades and minor fixes.

To learn more, please visit the 5.7.3 and 5.6.7 release summaries.

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring Runtime offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all