Stay ahead and competitive in Open Source! Get insights, trends, and predictions from real users in the 2025 Enterprise Linux & Open Source Landscape Report

Extended Lifecycle Support for Spring

Enjoy up to three years of rapid security fixes for your end-of-life Spring applications, avoid upgrade hassles, and get the flexibility to choose the exact amount of support you need – from the top provider of affordable extended support for end-of-life enterprise systems.

Get a Quote

Ask a Question

Why Not Simply Migrate to the Latest Version?

The next major Spring release introduces breaking changes, making the transition challenging, especially if you are also using non-Spring dependencies in your application.

If you're unable to migrate to the new version in time, you can face cyber threats and fail to meet security compliance standards due to unpatched vulnerabilities. But, fortunately, there is a better path forward with extended support from TuxCare.

With Extended Lifecycle Support, You Can:

Minimize Security Risks

Get up to 3 years of security patches for Spring vulnerabilities while you strategize your upgrade

Compatibility Icon

Preserve Compatibility

Avoid code refactoring and keep your Spring applications running smoothly for years to come

Compliance Icon

Ensure Compliance

Gain 14-day SLAs for security fixes and establish transparency with detailed SBOMs for each library

TuxCare Takes Up the Security Support Baton for Spring,
Starting with the Following Versions (see the list of already fixed CVEs here)

GroupID

ArtifactID

Version

org.springframework

org.springframework.boot

org.springframework.data

org.springframework.security

ArtifactID

spring-core

spring-jcl

spring-context

spring-beans

spring-expression

spring-jms

spring-messaging

spring-aop

spring-context-support

spring-tx

spring-orm

spring-aspects

spring-r2dbc

spring-jdbc

spring-web

spring-webmvc

spring-oxm

spring-webflux

spring-websocket

spring-boot-build

spring-boot-project

spring-boot

spring-boot-actuator

spring-boot-actuator-autoconfigure

spring-boot-autoconfigure

spring-boot-cli

spring-boot-dependencies

spring-boot-devtools

spring-boot-docs

spring-boot-parent

spring-boot-properties-migrator

spring-boot-starters

spring-boot-tools

spring-boot-starter

spring-boot-starter-activemq

spring-boot-starter-actuator

spring-boot-starter-amqp

spring-boot-starter-aop

spring-boot-starter-artemis

spring-boot-starter-batch

spring-boot-starter-cache

spring-boot-starter-data-cassandra

spring-boot-starter-data-cassandra-reactive

spring-boot-starter-data-couchbase

spring-boot-starter-data-couchbase-reactive

spring-boot-starter-data-elasticsearch

spring-boot-starter-data-jdbc

spring-boot-starter-data-jpa

spring-boot-starter-data-ldap

spring-boot-starter-data-mongodb

spring-boot-starter-data-mongodb-reactive

spring-boot-starter-data-neo4j

spring-boot-starter-data-r2dbc

spring-boot-starter-data-redis

spring-boot-starter-data-redis-reactive

spring-boot-starter-data-rest

spring-boot-starter-freemarker

spring-boot-starter-graphql

spring-boot-starter-groovy-templates

spring-boot-starter-hateoas

spring-boot-starter-integration

spring-boot-starter-jdbc

spring-boot-starter-jersey

spring-boot-starter-jetty

spring-boot-starter-jooq

spring-boot-starter-json

spring-boot-starter-jta-atomikos

spring-boot-starter-log4j2

spring-boot-starter-logging

spring-boot-starter-mail

spring-boot-starter-mustache

spring-boot-starter-oauth2-client

spring-boot-starter-oauth2-resource-server

spring-boot-starter-parent

spring-boot-starter-quartz

spring-boot-starter-reactor-netty

spring-boot-starter-rsocket

spring-boot-starter-security

spring-boot-starter-thymeleaf

spring-boot-starter-tomcat

spring-boot-starter-undertow

spring-boot-starter-validation

spring-boot-starter-web

spring-boot-starter-web-services

spring-boot-starter-webflux

spring-boot-starter-websocket

spring-boot-antlib

spring-boot-autoconfigure-processor

spring-boot-buildpack-platform

spring-boot-configuration-metadata

spring-boot-configuration-processor

spring-boot-gradle-plugin

spring-boot-jarmode-layertools

spring-boot-loader

spring-boot-loader-tools

spring-boot-maven-plugin

spring-data-cassandra

spring-data-commons

spring-data-couchbase

spring-data-elasticsearch

spring-data-jdbc

spring-data-relational

spring-data-jpa

spring-data-ldap

spring-data-mongodb

spring-data-neo4j

spring-data-r2dbc

spring-data-redis

spring-data-keyvalue

spring-data-rest-webmvc

spring-data-rest-core

spring-security-crypto

spring-security-config

spring-security-core

spring-security-oauth2-client

spring-security-oauth2-core

spring-security-oauth2-jose

spring-security-oauth2-resource-server

spring-security-web

Version

5.3.31

5.3.31

5.3.31

5.3.31

5.3.31

5.3.31

5.3.31

5.3.31

5.3.31

5.3.31

5.3.31

5.3.31

5.3.31

5.3.31

5.3.31

5.3.31

5.3.31

5.3.31

5.3.31

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

2.7.18

3.4.18

2.7.18

4.4.18

4.4.18

2.4.18

2.4.18

2.7.18

2.7.18

3.4.18

6.3.18

1.5.18

2.7.18

2.7.18

3.7.18

3.7.18

5.7.11

5.7.11

5.7.11

5.7.11

5.7.11

5.7.11

5.7.11

5.7.11

Set Up Your Extended Support for Spring in Just a Few Clicks

Step 1

Get your ELS for Spring access
credentials

Access-token Icon

Compatibility Icon

Step 2

Adjust your Maven/Gradle
configuration files

Step 3

Switch to the TuxCare versions
of your libraries

Why TuxCare?

Long-Term Commitment to Secure Open Source

We have been consistently ensuring the cybersecurity, stability, and compliance of open source – from end-of-life Python, PHP, and Java languages to the most popular Linux distributions – for over a decade.

Long-Term

Long-Term

Mastery in Security Patch Delivery

Our team has the battle-tested expertise and industry-leading technologies required to deliver timely and extensively tested security patches with over 120,000 patches released to date – and growing.

Customer-Driven Culture

We are committed to ensuring our solutions always fit your organization’s unique needs and requirements.

Long-Term

Looking to Ensure the Security of Your Entire Java Supply Chain?

Discover TuxCare’s SecureChain for Java to safeguard your entire Java tech stack so you can focus more on innovation. Our trusted repository offers secure, compliant Java libraries and packages, guaranteeing seamless operation without the need for resource-consuming code refactoring.

LEARN MORE