Spring Framework CVE-2021-22060 has been published

Engineering | Rossen Stoyanchev | January 05, 2022 | ...

The Spring Framework 5.3.14 and 5.2.19 releases on December 16 included fixes for CVE-2021-22060 and are a follow-up to CVE-2021-22096, to address additional types of input that can cause the issue. As the Spring Boot releases 2.6.2 and 2.5.8 picking up these Spring Framework versions were due the day before Christmas and given the medium severity, we postponed the announcement until after the new year, to avoid disclosure during a period when many take time off. Please, upgrade to those latest maintenance releases.

This Week in Spring (11 year anniversary edition!) - January 4th, 2022

Engineering | Josh Long | January 04, 2022 | ...

Hi, Spring fans! Welcome to another installment of This Week in Spring, the first in the new year! (Happy new year!) This week also marks the 11th anniversary of This Week in Spring, which I started writing on the first Tuesday of January 2011 thanks to a great idea from SpringSource co-founder and all-around good-guy Keith Donald (@kdonald).

What a run! As always, I just wanna extend a heartfelt thanks to all of you who read (suffer!) my rambling writing every week. We've been lucky, as a community, to have presided over the most amazing and uplifting period in Spring and the JVM's history... This roundup has reflected that with incredible stuff happening all the time. Where there's smoke, there's fire. The many blogs, articles, podcasts, YouTube (and ever so occasionally Vimeo) videos, etc., are interesting in themselves, but they also signal interesting…

Go, Go, GraalVM with Spring Native: My Adventures in Native Image-ville

Engineering | Josh Long | December 29, 2021 | ...

Hi, Spring fans! Happy new year! I can't believe we quickly got this far, but we did. This last year's been insanely busy, and one of the things I've most loved is all the opportunities to use Spring Native to build GraalVM-powered architecture-specific native images.

We released Spring Native 0.11, which is fantastic because it features a brand new AOT (ahead-of-time) engine that completely reworks how we transpile Spring Boot applications into GraalVM native images. I've been working with GraalVM a lot over the last two years, and this new release is a vast, revolutionary step in the story…

This Year in Spring - December 28th, 2021

Engineering | Josh Long | December 28, 2021 | ...

Hi, Spring fans! How're you doin'? I'm fresh off a fantastic holiday spent with family in Los Angeles, California. Later today, the girls and I will drive home to San Francisco, California. I've enjoyed my visits with people here in Los Angeles, especially since it's our first actual visit to Los Angeles before the pandemic.

And now, (can you believe it?), we're staring down the new year. As always, I will do my yearly This Year in Spring roundup, so stay tuned for that below, after our weekly roundup. So, without further ado, here's the last This Week in Spring recap of 2021.

This Week in Spring - December 21st, 2021

Engineering | Josh Long | December 21, 2021 | ...

Hi, Spring fans! What a crazy wonderful week it's been and what a wonderful week it'll be! It's the holidays. I've set my out-of-office status and am already winding down for the year. You can expect new episodes of This Week in Spring and a Bootiful Podcast (@BootifulPodcast), of course, but I won't be doing any new Spring Tips (@SpringTipsLive) videos until next year. That said, I can't wait for you to see what I'm cooking up for the new installmetn of Spring Tips! It's going to be a ton of fun!

Now then, we've got a crazy amount of stuff to get to this week. Let's dive right into it. It'll be Christmas before we talk again, so Merry Christmas, if you celebrate that. Otherwise, I just hope you're having a wonderful week. I look forward to next week's installment where of course we'll do our yearly This Year in Spring

Client Side Development with Spring Boot Applications - Part 2

Engineering | Dave Syer | December 17, 2021 | ...

Part 1

Plain Javascript with SSE Stream

Vue isn’t really adding a lot of value in this simple HTML replacement use case, and it would add no value at all to the SSE example, so we will go ahead and implement that in vanilla Javascript. Here’s a stream tab:

<div class="tab-pane fade" id="stream" role="tabpanel">
	<div class="container">
		<div id="load"></div>
	</div>
</div>

and some Javascript to populate it:

<script type="module">
	var events = new EventSource("/stream");
	events.onmessage = e => {
		document.getElementById("load").innerHTML = e.data;
	}
</script>

Dynamic Content with React

Get the Spring newsletter

Stay connected with the Spring newsletter

Subscribe

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all