On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Security 6.0.1, 5.8.1, 5.7.6 and 5.6.10 are available now. In all cases, the releases are mostly composed of bug fixes and documentation improvements.
To learn more, please visit the 6.0.1, 5.8.1, 5.7.6 and 5.6.10 release summaries.
On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Security 6.0.0-RC2 is available now.
Spring Security 6.0.0-RC2 includes fixes and improvements to the documentation. Stay tuned for the announcement of Spring Boot 3.0.0-RC2 later this week!
Spring Security 5.6.9 and 5.7.5 released on October 31st, 2022 included a fix for CVE-2022-31692 affecting the AuthorizationFilter. Users are encouraged to update as soon as possible.
On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Security 5.8.0-M2 is available now.
This release includes dependency upgrades, bug fixes, and enhancements. Here are a few noteworthy changes:
See the 5.8.0-M2 release notes for more details.
A new round of releases for Spring Security is available now. The new releases fix a bug where the StrictHttpFirewall incorrectly rejects valid CJKV characters.
Please take a look at the release notes for more information.
On behalf of the community, I’m pleased to announce the release of Spring Security 5.7.0-RC1!
In addition to dependency upgrades, bug fixes, and minor enhancements, the release candidate contains a few noteworthy changes:
Introduced SecurityContextHolderFilter - Ability to require explicit saving of the SecurityContext
Added DSL support for Cross Origin Policies headers
Allow configuring PKCE for confidential clients
Added SAML 2.0 Login & Single Logout XML support
This release candidate is a good opportunity to give feedback before the actual GA release in mid-May. We look forward…
On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Security 6.0.0-M1 and 5.7.0-M1 are available now.
This initial 6.0 milestone covers the baseline upgrade efforts, in particular requiring JDK 17+ and migrating to the Jakarta EE 9 APIs, required by Spring Framework 6, as announced in this blog post.
For the release changes, please refer to the releases page.
Stay tuned for the announcement of Spring Boot 3.0.0-M1 this week!
On behalf of the community, I’m pleased to announce the release of Spring Security 5.2.15 (release notes), Spring Security 5.3.13 (release notes), Spring Security 5.4.10 (release notes), Spring Security 5.5.4 (release notes) and Spring Security 5.6.1 (release notes). These releases deliver bug fixes along with some minor improvements. Users are encouraged to update to the latest patch release.
Project Site | Reference | Help
NOTE: There was a missing dependency update in 5.2.14.RELEASE which caused us to need to release 5.2.15.RELEASE.
VMware offers training and certification to turbo-charge your progress.
Learn moreSpring Runtime offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.
Learn moreCheck out all the upcoming events in the Spring community.
View all