Lucene search
+L
SpringMost viewed

935 matches found

Spring Security Advisories
Spring Security Advisories
added 2024/12/12 12:0 a.m.13 views

A Bootiful Podcast: the amazing K. Siva Prasad Reddy (SivaLabs)

Hi, Spring fans! In today's installment I talk to industry legend K. Siva Prasad Reddy @sivalabs. You've probably read one of his blogs. I know I have!...

7.1AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2024/11/26 12:0 a.m.13 views

HTTP/3 support in Reactor 2024.0 Release Train

HTTP/3, the latest major version of the Hypertext Transfer Protocol, had its specification finalized in June 2022. This version is designed to enhance performance, reliability, and security. Unlike its predecessors, HTTP/3 utilizes QUIC instead of TCP as its transport layer. QUIC is a UDP-based,...

6.8AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2024/08/15 12:0 a.m.13 views

A Bootiful Podcast: Gradle and Develocity engineer and Spring community legend Eric Haag

Hi, Spring fans! In this episode I talk to Gradle and Develocity engineer and Spring community legend Eric Haag...

7.2AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2024/08/08 12:0 a.m.13 views

A Bootiful Podcast: Spring Cloud Dataflow, Spring Cloud Task, and Spring Batch legend Glenn Renfro

Hi, Spring fans! In this installment, I talk to Spring Cloud Dataflow, Spring Cloud Task, and Spring Batch legend Glenn Renfro...

7.2AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2024/08/07 12:0 a.m.13 views

Spring Tips: HTMX

Hi, Spring fans! HTMX is the progressive hypertext sensation that's sweeping the process of web app creation, and - thanks to a nice integration by Spring community legend Wim Deblauwe, it's easier than ever to use it with Spring Boot and Thymeleaf. And, it's the topic of today's installment! jav...

7.2AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2024/07/17 12:0 a.m.13 views

Spring Tips: Proxies

Hi, Spring fans! In this installment we look at the use of JDK and CGLIB-based proxies in Spring, and demystify their application Java SpringBoot SpringFramework Architecture DesignPatterns oop...

7.2AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2024/07/08 12:0 a.m.13 views

Spring AI - Groq AI inference

Faster information processing not only inform—it transforms how we perceive and innovate. Spring AI, a powerful framework for integrating AI capabilities into Spring applications, now offers support for Groq - a blazingly fast AI inference engine with supports for Tool/Function calling. Because...

6.9AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2024/07/03 12:0 a.m.13 views

Spring Tips: Testcontainers, Docker Compose, and Service Connections, oh my

Hi, Spring fans! In this installment, we look at the amazing service connection mechanism in Spring Boot. Service connections are what allow Spring Boot to connect to Testcontainers or Docker Compose containers for supporting infrastructure like SQL databases, middleare, and more. java...

7.9AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2024/06/06 12:0 a.m.13 views

A Bootiful Podcast: Jetbrains Developer Advocate Pasha Finkelshteyn

Hi, Spring fans! In this week's installment I talk to Jetbrains' Developer Advocate Pasha Finkelshteyn...

7.2AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2024/05/21 12:0 a.m.13 views

This Week in Spring - May 21st, 2024

Welcome to another installment of This Week in Spring! It's been yet another amazing and exciting week and with it a bevy of new releases. And of course, in about a week's time, we will find ourselves at Spring IO, ready to show a lot of these new things. Will you be there? I will! Anyway, let's...

7.1AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2024/04/26 12:0 a.m.13 views

A Bootiful Podcast: Daniel Garnier-Moiroux on Passkeys and Spring Security

Hi, Spring fans! In this installment, I talk to my friend and colleague Daniel Garnier-Moiroux about the amazing awesome implications of passkeys in a Spring Security application...

7.1AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2024/04/10 12:0 a.m.13 views

Spring Tips: the Spring Expression Language

Hi, Spring fans! In this installment, I look at the excellent Spring Expression Language, an embedded language for resolving simple expressions that is built right into the Spring Framework...

7.3AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2024/03/06 12:0 a.m.13 views

Spring Tips: the Spring Authorization Server: durability of data

Hi, Spring fans! In this installment, we continue our look at the venerable Spring Authorization Server, this time looking at how to configure persistence and durability for various aspects of the system...

7.2AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2023/12/19 12:0 a.m.13 views

This Week in Spring - December 19th, 2023

Hi, Spring fans! Welcome to another oh-so-festive edition of This Week in Spring! the Spring Authorization Server 1.2.1, 1.1.14, and 0.4.5, are now available Spring AMQP 3.1.1 is now available Spring Security 5.8.9, 6.1.6, 6.2.1 are now available Spring for Apache Kakfa 3.1.1 is now available...

7.1AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2023/12/04 12:0 a.m.13 views

CDS with Spring Framework 6.1

As a follow-up to the Runtime efficiency with Spring blog post, I am happy to share that our exploration of Project Leyden optimizations has led to some interesting discoveries regarding the JDK's little-used CDS "Class Data Sharing" feature and has materialized into a new feature that we have be...

7.5AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2023/11/23 12:0 a.m.13 views

Spring Tips: Spring Boot 3.2

Hi, Spring fans! In this installment of Spring Tips, I look at the new Spring Boot 3.2 release, due to drop today, the 23rd of November 2023! 23-11-23! We're diving into the cool new features of Spring Boot 3.2 and Java 21. We'll explore how virtual threads from Project Loom make your code run...

7.3AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2023/11/23 12:0 a.m.13 views

A Bootiful Podcast: iText Creator Bruno Lowagie

Hi, Spring fans! We're releasing Spring Boot 3.2 today! And it's Thanksgiving in the USA Happy Thanksgiving!. So, we wanted to celebrate with an amazing episode, and so today's guest is opensource legend Bruno Lowagie. Enjoy!...

7.2AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2023/11/21 12:0 a.m.13 views

This Week in Spring - Spring Boot 3.2 edition - November 21st, 2023

Hi, Spring fans! Welcome to another epic installment of This Week in Spring! As amazing as the week's already been, it's all leading up to this Thursday - Thanksgiving day! - when we release Spring Boot 3.2! and yes, I am very grateful. This release is stuffed to the gills with a ton of new...

7.2AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2023/10/24 12:0 a.m.13 views

A Use Case for Transactions: Outbox Pattern Strategies in Spring Cloud Stream Kafka Binder

Other parts in this blog series Part 1: Introduction to Transactions in Spring Cloud Stream Kafka Applications Part 2: Producer Initiated Transactions in Spring Cloud Stream Kafka Applications Part 3: Synchronizing with External Transaction Managers in Spring Cloud Stream Kafka Applications Part ...

7.3AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2023/08/31 12:0 a.m.13 views

A Bootiful Podcast: Spring Security and Kubernetes legend Daniel Garnier-Moiroux

Hi, Spring fans! In this installment Josh Long talks to Spring contributor and adjunct professor at Mines Paris, Daniel Garnier-Moiroux @kehrlann, about the wild and wonderful intersection of all things Spring Security and Kubernetes, productized Spring Cloud Services, and more, recorded live at...

6.9AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2023/07/27 12:0 a.m.13 views

A Bootiful Podcast: Spring team legend Dr. David Syer on view rendering technologies, the latest-and-greatest, SpringOne 2023, and more

Hi, Spring fans! In this installment Josh Long talks to the legendary Dr. David Syer about view rendering technologies, SpringOne, and more. Have you registered for SpringOne yet? Are you interested in learning Spring? Check out Spring Academy...

6.8AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2023/06/21 12:0 a.m.13 views

Docker Compose Support in Spring Boot 3.1

Docker Compose support in Spring Boot 3.1 builds on top of the ConnectionDetails abstraction, which we've featured in a separate blog post. If you haven't already read it, please do so before reading this post. Docker Compose "is a tool for defining and running multi-container Docker applications...

10AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2023/05/04 12:0 a.m.13 views

A Bootiful Podcast: Java Champion Ken Kousen on Gradle, Java, Kotlin, Mockito, and more

Hi, Spring fans! In this installment, Josh Long @starbuxman talks to Java Champion Ken Kousen @kenkousen, live from the Great International Developer Summit 2023 in beautiful Bangalore, India, about Gradle, the Kotlin DSL, Java, and so much more Check out Ken's awesome Youtube channel...

6.8AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2023/04/27 12:0 a.m.13 views

A Bootiful Podcast: Sebastien Deleuze and James Ward on a Bootiful Podcast

Hi, Spring fans! In this installment, recorded live from Kotlin Conf 2023 in Amsterdam, I talk to Kotlin luminaries Sébastien Deleuze and James Ward about Kotlin's future, web assembly, and more...

6.7AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2023/03/28 12:0 a.m.13 views

This Week in Spring - March 28th, 202

Hi, Spring fans! Welcome to another installment of This Week in Spring! I'm reporting to you from Los Angeles, where my family and I have gone for my daughter's spring break. We're going to survey some prospective colleges and we're going to Disneyland. Needless to say, I'm doubly glad to have al...

6.4AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2023/01/17 12:0 a.m.13 views

This Week in Spring - January 17th, 2023

Hi, Spring fans! Welcome to another installment of This Week in Spring! I went to Helsinki, Finland, last week, and this week I'm in Atlanta, Georgia, to speak at the Atlanta Java User Group. And, of course, next week, I'll be in New York to join a viewing party for the airing of SpringOne...

7.1AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2022/08/04 9:0 a.m.13 views

A Bootiful Podcast: Observability guru Jonatan Ivanov on the future of observability in Spring Boot

Hi, Spring fans! In this installment, Josh Long @starbuxman talks to Spring observability guru Jonatan Ivanov @jonatanivanov...

1.6AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2022/08/02 7:0 a.m.13 views

This Week in Spring - August 1st, 2022

Aloha, Spring fans! Welcome to another installment of This Week in Spring! Im still on vacation on the beautiful island of Maui, Hawaii, but I wanted to say hello "aloha!" and share this weeks latest roundup of all thats good and glorious in the wide and wonderful world of Springdom. Funny thing,...

0.3AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 6 days ago12 views

A Bootiful Podcast: Russ Miles on Safer, More Productive Interactions with AI

I’m joined, I think, for the second time by my friend, the legendary architect and developer extraordinaire Russ Miles, who has given some of the most cerebral and exciting Spring keynotes and talks ever. And this time, he’s back to talk about — guess what — A.I. As usual, he’s got a different an...

6.1AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2026/06/10 12:0 a.m.12 views

cve-2026-40995 - MEDIUM - X.509 authentication bypasses Spring Security account checks

cve-2026-40995 - MEDIUM - X.509 authentication bypasses Spring Security account checks...

5.4CVSS6.1AI score0.00148EPSS
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2026/06/10 12:0 a.m.12 views

cve-2026-41699 - HIGH - Unsafe Deserialization in Spring GraphQL

cve-2026-41699 - HIGH - Unsafe Deserialization in Spring GraphQL...

9.8CVSS6.1AI score0.0043EPSS
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2026/06/10 12:0 a.m.12 views

cve-2026-40985 - MEDIUM - Data Binding Vulnerability in Spring Web Flow with Unified EL Parser

cve-2026-40985 - MEDIUM - Data Binding Vulnerability in Spring Web Flow with Unified EL Parser...

6.4CVSS6.1AI score0.00225EPSS
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2026/06/10 12:0 a.m.12 views

cve-2026-40987 - HIGH - Remote-file synchronizer in Spring Integration writes server-supplied filename under localDirectory without canonicalization

cve-2026-40987 - HIGH - Remote-file synchronizer in Spring Integration writes server-supplied filename under localDirectory without canonicalization...

7.1CVSS6.1AI score0.0021EPSS
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2026/06/09 12:0 a.m.12 views

cve-2026-41711 - MEDIUM - Potential Denial of Service through crafted Sort Parameters

cve-2026-41711 - MEDIUM - Potential Denial of Service through crafted Sort Parameters...

5.9CVSS6.1AI score0.0028EPSS
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2026/06/09 12:0 a.m.12 views

cve-2026-41694 - LOW - SAML Payloads Decrypted Without Valid Signature

cve-2026-41694 - LOW - SAML Payloads Decrypted Without Valid Signature...

5.3CVSS6.1AI score0.00137EPSS
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2026/06/09 12:0 a.m.12 views

cve-2026-41714 - MEDIUM - In Spring AMQP the `RabbitConnectionFactoryBean.setUri("amqps://...")` bypasses secure SSL setup, uses `TrustEverythingTrustManager`

cve-2026-41714 - MEDIUM - In Spring AMQP the RabbitConnectionFactoryBean.setUri"amqps://..." bypasses secure SSL setup, uses TrustEverythingTrustManager...

4CVSS6.1AI score0.00132EPSS
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2026/05/12 12:0 a.m.12 views

This Week in Spring - May 12th, 2026

Hi, Spring fans! As I write this I am in Miami, FL at the CodeRemix.ai show, focused on the wide and wonderful world of OpenRewrite and Moderne. I've got a talk to give so let's dive right into it! a quick note about the upcoming release train dates in last week's installment of A Bootiful Podcas...

5.8AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2026/04/23 12:0 a.m.12 views

RabbitMQ auto-configuration with an SSL bundle disables TLS hostname verification

When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform hostname verification when connecting to the RabbitMQ broker...

5CVSS5.9AI score0.00157EPSS
Exploits0References1Affected Software1
Spring Security Advisories
Spring Security Advisories
added 2025/11/12 12:0 a.m.12 views

Null-safe applications with Spring Boot 4

This is a new blog post in the Road to GA series, this time sharing an update on the status of the null-safety support across the Spring portfolio, as a follow-up of my previous related blog post Null Safety in Spring applications with JSpecify and NullAway and related Spring I/O talk. Are we...

7.2AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2025/11/06 12:0 a.m.12 views

A Bootiful Podcast: The Vaadin team, live from Vaadin Create 2025

Hi, Spring fans! In this installment, I had the privilege to sit down with Vaadin legends Joonas Lehtinen, Marcus Hellberg, and Leif Åstrand at the amazing Vaadin Create 2025 event in Frankfurt, Germany...

7AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2025/10/30 12:0 a.m.12 views

A Bootiful Podcast: Elastic's developer advocate extraordinairre Philip Krenn on the state of logging

Hi, Spring fans! In this installment, we talk to my friend and Elastic's developer advocate extraordinairre Philip Krenn on the state of logging...

6.9AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2025/10/21 12:0 a.m.12 views

Multi-Factor Authentication in Spring Security 7

In 2013, it was proposed to add multi-factor authentication into Spring Security. That was the year that “selfie” was added to the English dictionary and “What Does the Fox Say?” was a viral YouTube hit. Needless to say, one of the biggest features in Spring Security 7 is a long time coming, and ...

7.1AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2025/07/15 12:0 a.m.12 views

This Week in Spring - July 15th, 2025

Hi, Spring fans! It's already the 15th of July! We're closer to 2026 than we are to 2024. And time's sure flying. Like I will, tomorrow. I'll be flying to Denver for the amazing UBERCONF software show! I'll be doing a workshop and two talks, and if you're there, I hope you'll come say "hi"! Let's...

7.2AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2025/04/17 12:0 a.m.12 views

A Bootiful Podcast: 'Mr. Apache' Jeff Genender

Hi, Spring fans! In this episode I'm joined by well-known member of the Java community Jeff Genender, whose contributions to Apache over the decades have driven several key projects with which you're no doubt familiar...

7.2AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2025/04/04 12:0 a.m.12 views

A Bootiful Podcast: AWS Developer Advocate and industry legend James Ward

Hi, Spring fans! In this installment I talk to AWS Developer Advocate and industry legend James Ward about AWS Bedrock, Amazon Cohere, Spring AI, MCP, and so much more!...

7.2AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2025/03/25 12:0 a.m.12 views

Using Spring AI 1.0.0-SNAPSHOT: Important Changes and Updates

Using Spring AI 1.0.0-SNAPSHOT: Important Changes and Updates Spring AI 1.0.0-SNAPSHOT introduces several important changes to artifact IDs, dependency management, and autoconfiguration. This blog post outlines these changes and provides guidance on how to update your projects. The most significa...

7.4AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2025/02/11 12:0 a.m.12 views

This Week in Spring - February 11th, 2025

Hi, Spring fans! It's almost Valentine's day, and let me just say: I love the Spring community! It's such an exciting and interesting place to be. Thank you everyone for all that you do. I'm busy preparing for ConFoo, in Montreal, Canada, and for Devnexus, in Atlanta, Georgia. If you're around be...

7.9AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2025/02/04 12:0 a.m.12 views

This Week in Spring - February 11th, 2025

Hi, Spring fans! It's almost Valentine's day, and let me just say: I love the Spring community! It's such an exciting and interesting place to be. Thank you everyone for all that you do. I'm busy preparing for ConFoo, in Montreal, Canada, and for Devnexus, in Atlanta, Georgia. If you're around be...

7.2AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2025/01/16 12:0 a.m.12 views

A Bootiful Podcast: Apache Causeway’s Dan Haywood

Hi, Spring fans! In this installment I talk to the legendary Dan Haywood, contributor to the Apache Causeway project...

7.2AI score
Exploits0
Spring Security Advisories
Spring Security Advisories
added 2024/12/03 12:0 a.m.12 views

This Week in Spring - December 3rd, 2024

Hi, Spring fans! Welcome to another installment of This Week in Spring! It's the first week of December and I am in the amazing city of Perth, Australia. Perth, for those of you who don't know, is amazing. And well worth the journey. But it is quite the journey! 27 hours, door-to-door, from San...

7.1AI score
Exploits0
Total number of security vulnerabilities935