1067 matches found
A Bootiful Podcast: Oracle VP and GraalVM founder Thomas Wuerthinger
Hi, Spring fans! In this installment I talk to Oracle VP and GraalVM founder Thomas Wuerthinger, recorded at Devoxx 2025!...
A Bootiful Podcast: Oracle VP and GraalVM founder Thomas Weurthinger
Hi, Spring fans! In this installment I talk to Oracle VP and GraalVM founder Thomas Weurthinger, recorded at Devoxx 2025!...
Introducing Share Consumer Support (Kafka Queues) in Spring for Apache Kafka
Continuing our Road to GA series, this week we're exploring Share Groups in Apache Kafka 4.0.0 and their integration in Spring for Apache Kafka 4.0.0 - a feature that fundamentally expands how we can consume messages from Kafka topics. When we first start working with Kafka, the mental model is...
Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies
Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies...
A Bootiful Podcast: My friend Anthony Dahanne on Buildpacks, Production, Docker images, and more
Salut fans de Spring! In this installment I'm joined by the legendary Anthony Dahanne. If you've enjoyed success in production using Spring's built-in spring-boot:build-image capability, you've got today's guest Anthony to thank for it!...
A Bootiful Podcast: HTMX creator Carson Gross
Hi, Spring and HTML fans! Today I talk to hypermedia enjoyer Carson Gross, creator of the ever popular HTMX library which eschews a ton of the complexity associated with building client side applications...
A Bootiful Podcast: Spring Cloud Dataflow, Spring Cloud Task, and Spring Batch legend Glenn Renfro
Hi, Spring fans! In this installment, I talk to Spring Cloud Dataflow, Spring Cloud Task, and Spring Batch legend Glenn Renfro...
A Bootiful Podcast: Marit van Dijk, Jetbrains Developer Advocate
Jetbrains Developer Advocate Marit van Dijk on reading code, IntelliJ IDEA, and more...
Spring Framework 6.2.0-M1: all the little things
The Spring Framework team has been busy reviewing the issue tracker in anger and reducing the number of opened issues. This was long overdue, with a number of issues being invalid or superseded in the meantime. This helped the team focusing on a more manageable amount of issues and we used the...
Spring Tips: the Spring Expression Language
Hi, Spring fans! In this installment, I look at the excellent Spring Expression Language, an embedded language for resolving simple expressions that is built right into the Spring Framework...
PKCE Downgrade in Spring Authorization Server
Spring Authorization Server versions 1.0.0 - 1.0.5, 1.1.0 - 1.1.5, 1.2.0 - 1.2.2 and older unsupported versions are susceptible to a PKCE Downgrade Attack for Confidential Clients. Specifically, an application is vulnerable when a Confidential Client uses PKCE for the Authorization Code Grant. An...
Spring Boot Testjars founder Rob Winch
Hi, Spring fans! In this week's installment we talk Rob Winch, lead of Spring Security and founder of the exciting new project Spring Boot Testjars...
A Bootiful Podcast: Dr. Venkat Subramaniam, on the latest in Java
Hi, Spring fans! In this installment the good and the great Dr. Venkat Subramaniam rejoins the show, live from the fantastic VOXXED DAYS CERN event, to talk about some of the amazing features in Java 21...
Directory Traversal in Reactor Netty HTTP Server
In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, a malicious user can send a request using a specially crafted URL that can lead to a directory traversal attack. Specifically, an application is vulnerable if Reactor Netty HTTP Server is configured t...
A Bootiful Podcast: Tadaya Tsuyukubo, creator of R2DBC Proxy, DataSource Proxy, and more
HI, Spring fans! In this installment Josh Long talks to R2DBC Proxy creator Tadaya Tsuyukubo, @ttddyy, creator of R2DBC Proxy and others...
A Bootiful Podcast: Grubhub's Josh Burns on Kotlin, Spring Boot, and more
We're crossing the streams, again! This time Josh Long talks to Grubhub's John Burns twitter: @wakingrufus mastodon: @[email protected] about dogfooding human food, Grubhub's tech stack, and more...
A Bootiful Podcast: Google Cloud Java Advocate Aaron Wanjala
Hi, Spring fans! In this installment, Josh Long @starbuxman talks to Google Cloud Java advocate Aaron Wanjala @ AaronMDubya about Spring Framework for Google Cloud...
A Bootiful Podcast: opensource, Spring Cloud, and Kubernetes maestro Abel Salgado Romero
Hi, Spring fans! In this installment, Josh Long @starbuxman talks to Abel Salgado Romero @abelsromero about open source, Kubernetes, and building Kubernetes controllers with Spring Boot and GraalVM native images...
This Week in Spring - January 17th, 2023
Hi, Spring fans! Welcome to another installment of This Week in Spring! I went to Helsinki, Finland, last week, and this week I'm in Atlanta, Georgia, to speak at the Atlanta Java User Group. And, of course, next week, I'll be in New York to join a viewing party for the airing of SpringOne...
A Bootiful Podcast: Microsoft's Brian Benz on the state of Java, Microsoft, Azure, and so much more
Hi, Spring fans! In this installment, Josh Long @starbuxman talks to Microsofts Brian Benz @bbenz...
A Bootiful Podcast: Java Champion, legend, and prolific open source contributor Andres Almiray
Hi, Spring fans! In this installment, Josh Long @starbuxman talks to Java Champion, legend, and prolific opensource contributor Andres Almiray @aalmiray...
A Bootiful Podcast: the good Dr. Venkat Subramaniam
Hi, Spring fans! In this installment, Josh Long @starbuxman talks to the good Dr. Venkat Subramaniam @venkats about the art of writing software, his latest projects, and more...
A Bootiful Podcast: RabbitMQ rabbit-herder Dan Carwin
Hi, Spring fans! In this installment Josh Long @starbuxman talks to a very busy rabbit-herder on the RabbitMQ team, Dan Carwin @dcarwin...
Unsafe Unzip with spring-integration-zip
spring-integration-zip , versions prior to 1.0.2, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive affects other archives as well, bzip2, tar, xz, war, cpio, 7z, that holds path traversal filenames. So when the filename gets concatenated to...
Unsafe Unzip with spring-integration-zip
spring-integration-zip , versions prior to 1.0.1, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive affects other archives as well, bzip2, tar, xz, war, cpio, 7z, that holds path traversal filenames. So when the filename gets concatenated to...
Data Binding Expression Vulnerability in Spring Web Flow
Applications that do not change the value of the MvcViewFactoryCreator useSpringBinding property which is disabled by default i.e. set to “false” can be vulnerable to malicious EL expressions in view states that process form submissions but do not have a sub-element to declare explicit data bindi...
Directory Traversal in Spring Framework
Some URLs were not santized correctly before use allowing an attacker to obtain any file on the file system that was also accessible to process in which the Spring web application was running...
A Bootiful Podcast: Michael Carducci on optimizing data for agentic workflows
Hi, Spring fans! In this episode, I sit down with Michael Carducci - software architect, magician, and knowledge graph expert—for a high-energy conversation about the future of AI. Michael breaks down why semantic data and auditable, deterministic reasoning are becoming essential for building...
CVE-2026-59315
CVE-2026-59315...
CVE-2026-59314
CVE-2026-59314...
cve-2026-59272 - MEDIUM - Log4j2 AmqpAppender disables TLS hostname verification by default
cve-2026-59272 - MEDIUM - Log4j2 AmqpAppender disables TLS hostname verification by default...
cve-2026-47891 - MEDIUM - Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder
cve-2026-47891 - MEDIUM - Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder...
A Bootiful Podcast: Sébastien Deleuze on the latest-and-greatest in Spring AI and Spring Framework
Hi Spring fans! In this installment we talk to the legendary Spring AI and Spring Framework contributor Sébastien Deleuze about the latest-and-greatest in AI, Kotlin, the framework, and more...
cve-2026-40984 - HIGH - Micrometer HTTP server instrumentations DoS vulnerability
cve-2026-40984 - HIGH - Micrometer HTTP server instrumentations DoS vulnerability...
This Week in Spring - May 12th, 2026
Hi, Spring fans! As I write this I am in Miami, FL at the CodeRemix.ai show, focused on the wide and wonderful world of OpenRewrite and Moderne. I've got a talk to give so let's dive right into it! a quick note about the upcoming release train dates in last week's installment of A Bootiful Podcas...
This Week in Spring - April 28th, 2026
Hi Spring fans! Welcome to another installment of This Week in Spring! As I write this, I'm on PTO in beautiful Santorini, Greece, catching up on some news and about to cruise the islands for some sightseeing. There's nothing quite like springtime in the Mediterranean! I couldn't dream of enjoyin...
A Bootiful Podcast: Mark Kropf on AI orchestration
Hi Spring fans! I was delighted to get a chance to sit and talk to my pal and Pivotal alum Mark Kropf about his efforts around orchestrating AI. This doesn’t have to do with the JVM or Spring, per se, but it’s an interesting discussion nonetheless...
This Week in Spring - April 7th, 2026
Hi Spring fans! Welcome to another installment of This Week in Spring! It's April 7th, 2026, and I'm on the road! I started the journey for the amazing Voxxed Days Amsterdam show and am now winding my way through France. I visited Colmar, a beautiful city from which the animators on Disney's Beau...
Prompt Caching Support in Spring AI with Anthropic Claude
Large language model API costs can accumulate quickly when applications repeatedly send the same prompt content. A typical scenario: you're building a document analyzer that includes a 3,000-token document in every request. Five questions about that document means processing 15,000 tokens of...
This Week in Spring - October 21st, 2025
Hi, Spring fans! Welcome to another installment of This Week in Spring! I'm writing this from the fantastic Vaadin Create conference here in Frankfurt, Germany. What an amazing show and community. Since we last spoke, I have been in Boston; New York city; Sofia, Bulgaria; Krakow, Poland; and now...
A Bootiful Podcast: Spring Batch lead Mahmoud Ben Hassine
Hi, Spring fans! In this installment we talk to the legendary lead of the Spring Batch project, Mahmoud Ben Hassine, about the latest-and-greatest in Spring Batch in the Spring Boot 4 generation...
A Bootiful Podcast: Donald Raab on Eclipse Collections
Hi, Spring fans! In this edition, we talk to Eclipse Collections founder Donald Raab...
A Bootiful Podcast: AWS Developer Advocate and industry legend James Ward
Hi, Spring fans! In this installment I talk to AWS Developer Advocate and industry legend James Ward about AWS Bedrock, Amazon Cohere, Spring AI, MCP, and so much more!...
A Bootiful Podcast: Dr. Dave Syer on the new and nifty Spring gRPC project
Hi, Spring fans! In this installment I talk to the good and the great Dr. Dave Syer about the experimental! new Spring gRPC project!...
Spring LDAP Spring LDAP sensitive data exposure for case-sensitive comparisons
The usage of String.toLowerCase and String.toUpperCase has some Locale dependent exceptions that could potentially result in unintended columns from being queried Related to CVE-2024-38820...
This Week in Spring - November 5th, 2024
This Week in Spring - November 5th, 2024 Hi, Spring fans! Welcome to another installment of This Week in Spring! It's the 5th of November, 2024, and, um, I - an American - am desperately trying to keep calm and carry on. I did everything I can do VOTE!, and so it's with considerable enthusiasm th...
This Week in Spring - October 1st, 2024
Hi, Spring fans! it's the first of October! We're officially in the fourth quarter of 2024! Time's moving too quickly. Way too quickly. But as always, there's awesome stuff afoot, so let's dive right in! Spring Framework lead Juergen Hoeller looks at the road ahead, to Spring Framework 6.2 and...
Spring Expression DoS Vulnerability
In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language SpEL expression that may cause a denial of service DoS condition. Specifically, an application is vulnerable when the following is true:...
Spring Tips: Proxies
Hi, Spring fans! In this installment we look at the use of JDK and CGLIB-based proxies in Spring, and demystify their application Java SpringBoot SpringFramework Architecture DesignPatterns oop...