← Dev digest

Spring Security releases and support boundaries in the April notice

The news at the time

The April notice announces Spring Security 6.5.10, 7.0.5 and 7.1.0-RC1 and links the security advisories addressed by the releases. These are historical release versions.

It states that open-source support for the Spring Security 5.7.x, 5.8.x, 6.3.x and 6.4.x generations had ended. Commercial support is a separate scope.

Follow-up checked during renewal

No additional follow-up fact was established in this renewal. This does not establish that nothing changed.

What to review before applying this

Match deployed dependencies to each official advisory and supported release line. Do not select a historical version merely because it appears in this archive, and distinguish a release candidate from a stable release.

Editorial review suggestions; no hands-on product experiment was performed.

Read the original reporting ↗

Claim-by-claim source evidence

The April notice announces Spring Security 6.5.10, 7.0.5 and 7.1.0-RC1 and links the security advisories addressed by the releases. These are historical release versions.

Spring Security 6.5.10 , 7.0.5 , and 7.1.0-RC1 .

Evidence source ↗

It states that open-source support for the Spring Security 5.7.x, 5.8.x, 6.3.x and 6.4.x generations had ended. Commercial support is a separate scope.

Spring Security 5.7.x, 5.8.x, 6.3.x, and 6.4.x generations has ended

Evidence source ↗

Korean digest for the historical date: 2026-04-22. Quotations and source context were reviewed editorially; this is not an independent experimental verification.

Discussion