Josh Cummings

Josh Cummings

Spring Security committer | Herriman, Utah

Josh has been a software engineer for over 15 years building enterprise applications across multiple industries. He has long been passionate about application security and loves opportunities to mentor and to learn from others about security awareness.

When Josh isn't hacking away at code, he is either running, playing basketball, camping, or reading a Brandon Sanderson novel.

Blog posts by Josh Cummings

Spring Security 5.6.12, 5.7.10, 5.8.5, 6.0.5, and 6.1.2 are available now, including fixes for CVE-2023-34034 and CVE-2023-34035

Releases | July 24, 2023 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce that the Spring Security 5.6.12, 5.7.10, 5.8.5, 6.0.5, and 6.1.2 are available now.

Please refer to the releases page for more detail on what is included in each release.

Those versions fix the following CVEs:

It is also important to remember that the 5.8 version of Spring Security is a special release designed to help you to migrate to Spring Security 6.0, therefore if you are planning to upgrade your applications, using that version combined with the special migration guide

Spring Security 5.7.3 and 5.6.7 available now

Releases | August 15, 2022 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Security 5.7.3 and 5.6.7 are available now. In both cases the releases are largely composed of dependency upgrades and minor fixes.

To learn more, please visit the 5.7.3 and 5.6.7 release summaries.

Spring Security 5.8.0-M1 and 6.0.0-M6 are released

Engineering | July 18, 2022 | ...

On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Security 5.8.0-M1 and 6.0.0-M6 are available now.

This release includes dependency upgrades, bug fixes, and enhancements. Here are a few noteworthy changes:

See the 5.8.0-M1 and 6.0.0-M6 release notes for more details.

Project Site | Reference | Help

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring Runtime offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all