Release Notes

Spring AMQP

2.4.18 (NES) - November 15, 2024

Notes

• This release originates from the open-source Spring AMQP repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring AMQP build 2.4.17.
• Full Version: 2.4.17-spring-amqp-2.4.18

Spring Batch

4.3.11 (NES) - October 21, 2024

Notes

• This release originates from the open-source Spring Batch repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Batch build 4.3.10.
• Full Version: 4.3.10-spring-batch-4.3.11

Spring Boot

2.7.20 (NES) - September 25, 2024

Bug Fixes

• Addresses issue in Spring Boot Jar loader to detect signature mismatch of nested jar files.
  • This patches the signature forgery vulnerability in Spring Boot's jar loader (CVE-2024-38807).
  • This fix is included in NES for Spring Boot version 2.7.18-spring-boot-2.7.20 in the following artifacts:
    • com.herodevs.nes.springframework.boot:spring-boot-loader:2.7.18-spring-boot-2.7.20

Notes

• Full Version: 2.7.18-spring-boot-2.7.20

2.7.19 (NES) - August 26, 2024

Notes

• This release originates from the open-source Spring Boot repository forked by HeroDevs. This release updates Spring Framework to NES version 5.3.40 and Spring Security NES version 5.7.13.
• The original Spring Boot 2.7.18 version included the following versions:
  • Spring Framework 5.3.31
  • Spring Security 5.7.11
• With the upgrade to our NES versions of Spring Framework 5.3.40 and Spring Security 5.7.13, these include the following changes from both Spring Framework and Spring Security projects. The release notes for those releases are listed below for reference:
  • Spring Framework:
    • v5.3.31
    • v5.3.32
    • v5.3.33
    • v5.3.34
    • v5.3.35
    • v5.3.36
    • v5.3.37
    • v5.3.38
    • v5.3.39
  • Spring Security:
    • 5.7.12
• Includes other modifications implemented by HeroDevs to ensure successful library builds.
• This release contains no functional changes from Spring Boot 2.7.18.
• Full Version: 2.7.18-spring-boot-2.7.19

1.5.24 (NES) - December 18, 2024

Bug Fixes

• This release patches the following:
  • Temporary Directory Hijacking to Local Privilege Escalation Vulnerability (CVE-2022-27772).
    • com.herodevs.nes.springframework.boot:spring-boot:1.5.22-spring-boot-1.5.24
  • Spring Boot Welcome Page DoS Vulnerability (CVE-2023-20883).
    • com.herodevs.nes.springframework.boot:spring-boot-autoconfigure:1.5.22-spring-boot-1.5.24
    • com.herodevs.nes.springframework.boot:spring-boot-test-autoconfigure:1.5.22-spring-boot-1.5.24

Notes

• This release updates Spring Framework to NES version 4.3.32 and Spring Security NES to NES version 4.2.22.
• Full Version: 1.5.22-spring-boot-1.5.24

1.5.23 (NES) - November 27, 2024

Notes

• This is the initial release of Spring Boot 1.5.22 from the open-source Spring Boot repository forked by HeroDevs.
• This release contains no functional changes from Spring Boot 1.5.22.
• Full Version: 1.5.22-spring-boot-1.5.23

Spring Cloud AWS

2.2.7 (NES) - December 23, 2024

Notes

• This release originates from the open-source Spring Cloud AWS repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful library builds.
• This version has a dependency on 3.1.10 (NES) of Spring Cloud Commons.
• Full Version: 2.2.6-spring-cloud-aws-2.2.7

Spring Cloud Build

3.1.10 (NES) - December 23, 2024

Notes

• This release originates from the open-source Spring Cloud Build repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds.
• The original version of this project has a dependency on Spring Boot 2.6.15.
• This version has a dependency on Spring Boot 2.7.18.
• Full Version: 3.1.9-spring-cloud-build-3.1.10

Spring Cloud Bus

3.1.4 (NES) - December 23, 2024

Notes

• This release originates from the open-source Spring Cloud Bus repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Cloud Bus 3.1.3.
• Full Version: 3.1.3-spring-cloud-bus-3.1.4

Spring Cloud Circuit Breaker

2.1.9 (NES) - December 23, 2024

Notes

• This release originates from the open-source Spring Cloud Circuit Breaker repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Cloud Circuit Breaker 2.1.8.
• Full Version: 2.1.8-spring-cloud-circuitbreaker-2.1.9

Spring Cloud Commons

3.1.10 (NES) - December 23, 2024

Notes

• This release originates from the open-source Spring Cloud Commons repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Cloud Commons 3.1.9.
• Full Version: 3.1.9-spring-cloud-commons-3.1.10

Spring Cloud Config

3.1.10 (NES) - December 23, 2024

Notes

• This release originates from the open-source Spring Cloud Config repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Cloud Config 3.1.9.
• Full Version: 3.1.9-spring-cloud-config-3.1.10

Spring Cloud Consul

3.1.6 (NES) - December 23, 2024

Notes

• This release originates from the open-source Spring Cloud Consul repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Cloud Consul 3.1.5.
• Full Version: 3.1.5-spring-cloud-consul-3.1.6

Spring Cloud Contract

3.1.11 (NES) - December 23, 2024

Notes

• This release originates from the open-source Spring Cloud Contract repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Cloud Contract 3.1.10.
• Full Version: 3.1.10-spring-cloud-contract-3.1.11

Spring Cloud Function

3.2.13 (NES) - December 23, 2024

Notes

• This release originates from the open-source Spring Cloud Function repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Cloud Function 3.2.12.
• Full Version: 3.2.12-spring-cloud-function-3.2.13

Spring Cloud Gateway

3.1.10 (NES) - December 23, 2024

Notes

• This release originates from the open-source Spring Cloud Gateway repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Cloud Gateway 3.1.9.
• Full Version: 3.1.9-spring-cloud-gateway-3.1.10

Spring Cloud GCP

3.8.10 (NES) - January 16, 2025

Notes

• This release originates from the open-source Spring Cloud GCP repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Cloud GCP 3.8.9.
• Full Version: 3.8.9-spring-cloud-gcp-3.8.10

Spring Cloud Kubernetes

2.1.10 (NES) - December 23, 2024

Notes

• This release originates from the open-source Spring Cloud Kubernetes repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Cloud Kubernetes 2.1.9.
• Full Version: 2.1.9-spring-cloud-kubernetes-2.1.10

Spring Cloud Netflix

3.1.9 (NES) - December 23, 2024

Notes

• This release originates from the open-source Spring Cloud Netflix repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Cloud Netflix 3.1.8.
• Full Version: 3.1.8-spring-cloud-netflix-3.1.9

Spring Cloud OpenFeign

3.1.10 (NES) - December 23, 2024

Notes

• This release originates from the open-source Spring Cloud OpenFeign repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Cloud OpenFeign 3.1.9.
• Full Version: 3.1.9-spring-cloud-openfeign-3.1.10

Spring Cloud Release

2021.0.10 (NES) - December 23, 2024

Notes

• This release originates from the open-source Spring Cloud Release repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Cloud Release 2021.0.9.
• The original version of this project managed dependencies for several Spring Cloud projects. This version manages dependencies for the equivalent NES for Spring Cloud projects.
• Full Version: 2021.0.9-spring-cloud-2021.0.10

Spring Cloud Sleuth

3.1.12 (NES) - December 23, 2024

Notes

• This release originates from the open-source Spring Cloud Sleuth repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Cloud Sleuth 3.1.11.
• Full Version: 3.1.11-spring-cloud-sleuth-3.1.12

Spring Cloud Stream

3.2.11 (NES) - December 23, 2024

Notes

• This release originates from the open-source Spring Cloud Stream repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Cloud Stream 3.2.10.
• Full Version: 3.2.10-spring-cloud-stream-3.2.11

Spring Cloud Task

2.4.7 (NES) - December 23, 2024

Notes

• This release originates from the open-source Spring Cloud Task repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Cloud Task 2.4.6.
• Full Version: 2.4.6-spring-cloud-task-2.4.7

Spring Cloud Vault

3.1.5 (NES) - December 23, 2024

Notes

• This release originates from the open-source Spring Cloud Vault repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Cloud Vault 3.1.4.
• Full Version: 3.1.4-spring-cloud-vault-3.1.5

Spring Cloud Zookeeper

3.1.6 (NES) - December 23, 2024

Notes

• This release originates from the open-source Spring Cloud Zookeeper repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Cloud Zookeeper 3.1.5.
• Full Version: 3.1.5-spring-cloud-zookeeper-3.1.6

Spring Data BOM

2.7.19 (NES) - August 30, 2024

Notes

• This release originates from the open-source Spring Data BOM repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Data BOM 2021.2.18.
• Full Version: 2021.2.18-spring-data-bom-2021.2.19

Spring Data Build

2.7.19 (NES) - August 30, 2024

Notes

• This release originates from the open-source Spring Data Build repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Data Build 2.7.18.
• Full Version: 2.7.18-spring-data-build-2.7.19

Spring Data Commons

2.7.19 (NES) - August 30, 2024

Notes

• This release originates from the open-source Spring Data Commons repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Data Commons 2.7.18.
• Full Version: 2.7.18-spring-data-commons-2.7.19

Spring Data Couchbase

4.4.19 (NES) - October 11, 2024

Notes

• This release originates from the open-source Spring Data Couchbase repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Data Couchbase 4.4.18.
• Full Version: 4.4.18-spring-data-couchbase-4.4.19

Spring Data Elasticsearch

4.4.19 (NES) - October 11, 2024

Notes

• This release originates from the open-source Spring Data for Elasticsearch repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Data Elasticsearch 4.4.18.
• Full Version: 4.4.18-spring-data-elasticsearch-4.4.19

Spring Data Envers

2.7.19 (NES) - October 11, 2024

Notes

• This release originates from the open-source Spring Data Envers repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Data Envers 2.7.18.
• Full Version: 2.7.18-spring-data-envers-2.7.19

Spring Data for Apache Cassandra

3.4.19 (NES) - October 11, 2024

Notes

• This release originates from the open-source Spring Data for Apache Cassandra repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Data Cassandra 3.4.18.
• Full Version: 3.4.18-spring-data-cassandra-3.4.19

Spring Data for Apache Solr

4.3.16 (NES) - December 19, 2024

Notes

• This release originates from the open-source Spring Data for Apache Solr repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful library builds.
• The original version of this project includes the following:
  • Spring Data Build 2.4.15
  • Spring Data Commons 2.4.15

  2.7.19 (NES) - August 30, 2024

• This version of Spring Data for Apache Solr upgrades these dependencies as follows
  • NES for Spring Data Build 2.7.19
  • NES for Spring Data Commons 2.7.19

This release contains no functional changes from Spring Data for Apache Solr 4.3.15.

• Full Version: 4.3.15-spring-data-solr-4.3.16

Spring Data JPA

2.7.19 (NES) - August 30, 2024

Notes

• This release originates from the open-source Spring Data JPA repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Data JPA 2.7.18.
• Full Version: 2.7.18-spring-data-jpa-2.7.19

Spring Data KeyValue

2.7.19 (NES) - September 27, 2024

Notes

• This release originates from the open-source Spring Data KeyValue repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Data KeyValue 2.7.18.
• Full Version: 2.7.18-spring-data-keyvalue-2.7.19

Spring Data LDAP

2.7.19 (NES) - September 20, 2024

Notes

• This release originates from the open-source Spring Data LDAP repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Data LDAP 2.7.18.
• Full Version: 2.7.18-spring-data-ldap-2.7.19

Spring Data MongoDB

3.4.19 (NES) - September 27, 2024

Notes

• This release originates from the open-source Spring Data MongoDB repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Data MongoDB 3.4.18.
• Full Version: 3.4.18-spring-data-mongodb-3.4.19

Spring Data Neo4j

6.3.19 (NES) - October 11, 2024

Notes

• This release originates from the open-source Spring Data Neo4j repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Data Neo4j 6.3.18.
• Full Version: 6.3.18-spring-data-neo4j-6.3.19

Spring Data R2DBC

1.5.19 (NES) - September 27, 2024

Notes

• This release originates from the open-source Spring Data R2DBC repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Data R2DBC 1.5.18.
• Full Version: 1.5.18-spring-data-r2dbc-1.5.19

Spring Data Redis

2.7.19 (NES) - September 27, 2024

Notes

• This release originates from the open-source Spring Data Redis repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Data Redis 2.7.18.
• Full Version: 2.7.18-spring-data-redis-2.7.19

Spring Data Relational

2.4.19 (NES) - September 20, 2024

Notes

• This release originates from the open-source Spring Data Relational repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Data Relational 2.4.18.
• Full Version: 2.4.18-spring-data-relational-2.4.19

Spring Data REST

3.7.19 (NES) - November 12, 2024

Notes

• This release originates from the open-source Spring Data REST repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful library builds. This release contains no functional changes from Spring Data REST 3.7.18.
• Full Version: 3.7.18-spring-data-rest-3.7.19

Spring Framework

5.3.44 (NES) - November 15, 2024

Bug Fixes

• Fixes to core and web packages to address DoS issue.
  • This patches DoS via Spring MVC controller method with byte parameter (CVE-2024-38828).
  • This fix is included in NES for Spring Framework version 5.3.39-spring-framework-5.3.44 in the following artifacts:
    • com.herodevs.nes.springframework:spring-core:5.3.39-spring-framework-5.3.44
    • com.herodevs.nes.springframework:spring-web:5.3.39-spring-framework-5.3.44

Notes

• Full Version: 5.3.39-spring-framework-5.3.44

5.3.43 (NES) - October 30, 2024

Bug Fixes

• Fixes to resource handling for Spring's WebMVC.fn and WebFlux.fn (functional) endpoints.
  • This patches a variation of the path traversal vulnerability in Spring's functional web frameworks (CVE-2024-38819).
  • This fix is included in NES for Spring Framework version 5.3.39-spring-framework-5.3.43 in the following artifacts:
    • com.herodevs.nes.springframework:spring-webmvc:5.3.39-spring-framework-5.3.43
    • com.herodevs.nes.springframework:spring-webflux:5.3.39-spring-framework-5.3.43

Notes

• Full Version: 5.3.39-spring-framework-5.3.43

5.3.42 (NES) - October 24, 2024

Bug Fixes

• Fixed an issue with DataBinder's disallowedFields related to case insensitivity.
  • This update addresses the Spring Framework DataBinder Case Sensitive Match Exception (CVE-2024-38820).
  • This fix is included in NES for Spring Framework version 5.3.39-spring-framework-5.3.42 in the following artifacts:
    • com.herodevs.nes.springframework:spring-context:5.3.39-spring-framework-5.3.42
    • com.herodevs.nes.springframework:spring-core:5.3.39-spring-framework-5.3.42
    • com.herodevs.nes.springframework:spring-web:5.3.39-spring-framework-5.3.42
    • com.herodevs.nes.springframework:spring-webmvc:5.3.39-spring-framework-5.3.42
    • com.herodevs.nes.springframework:spring-webflux:5.3.39-spring-framework-5.3.42
    • com.herodevs.nes.springframework:spring-websocket:5.3.39-spring-framework-5.3.42

Notes

• Full Version: 5.3.39-spring-framework-5.3.42

5.3.41 (NES) - September 19, 2024

Bug Fixes

• Fixes to resource handling for Spring's WebMVC.fn and WebFlux.fn (functional) endpoints.
  • This patches the path traversal vulnerability in Spring's functional web frameworks (CVE-2024-38816).
  • This fix is included in NES for Spring Framework version 5.3.39-spring-framework-5.3.41 in the following artifacts:
    • com.herodevs.nes.springframework:spring-webmvc:5.3.39-spring-framework-5.3.41
    • com.herodevs.nes.springframework:spring-webflux:5.3.39-spring-framework-5.3.41

Notes

• Full Version: 5.3.39-spring-framework-5.3.41

5.3.40 (NES) - August 26, 2024

Notes

• This release originates from the open-source Spring Framework repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Framework 5.3.39.
• Full Version: 5.3.39-spring-framework-5.3.40

4.3.32 (NES) - December 18, 2024

Bug Fixes

• This release patches the following:
  • Spring Expression DoS Vulnerability (CVE-2022-22950).
    • com.herodevs.nes.springframework:spring-expression:4.3.30-spring-framework-4.3.32
  • Spring Framework RCE via Data Binding on JDK 9+ (CVE-2022-22965).
    • com.herodevs.nes.springframework:spring-beans:4.3.30-spring-framework-4.3.32
    • com.herodevs.nes.springframework:spring-webmvc:4.3.30-spring-framework-4.3.32
  • Spring Framework DoS via Data Binding to MultipartFile or Servlet Part (CVE-2022-22970).
    • com.herodevs.nes.springframework:spring-beans:4.3.30-spring-framework-4.3.32
  • Spring Framework DoS with STOMP over WebSocket (CVE-2022-22971).
    • com.herodevs.nes.springframework:spring-messaging:4.3.30-spring-framework-4.3.32
  • Spring Expression DoS Vulnerability (CVE-2023-20861).
    • com.herodevs.nes.springframework:spring-expression:4.3.30-spring-framework-4.3.32
  • Spring Expression DoS Vulnerability (CVE-2023-20863).
    • com.herodevs.nes.springframework:spring-expression:4.3.30-spring-framework-4.3.32
  • Spring Framework URL Parsing with Host Validation (CVE-2024-22243).
    • com.herodevs.nes.springframework:spring-web:4.3.30-spring-framework-4.3.32
  • Spring Framework URL Parsing with Host Validation (CVE-2024-22259).
    • com.herodevs.nes.springframework:spring-web:4.3.30-spring-framework-4.3.32
  • Spring Framework URL Parsing with Host Validation (CVE-2024-22262).
    • com.herodevs.nes.springframework:spring-web:4.3.30-spring-framework-4.3.32
  • Improper handling of case sensitivity (CVE-2022-22968).
    • com.herodevs.nes.springframework:spring-context:4.3.30-spring-framework-4.3.32
    • com.herodevs.nes.springframework:spring-webmvc:4.3.30-spring-framework-4.3.32
  • Spring Expression DoS Vulnerability (CVE-2024-38808).
    • com.herodevs.nes.springframework:spring-expression:4.3.30-spring-framework-4.3.32
  • Spring Framework DoS via conditional HTTP request (CVE-2024-38809).
    • com.herodevs.nes.springframework:spring-web:4.3.30-spring-framework-4.3.32
  • Spring Framework DataBinder Case Sensitive Match Exception (CVE-2024-38820).
    • com.herodevs.nes.springframework:spring-context:4.3.30-spring-framework-4.3.32
  • DoS via Spring MVC controller method with byte parameter (CVE-2024-38828).
    • com.herodevs.nes.springframework:spring-web:4.3.30-spring-framework-4.3.32
  • Pivotal Spring Framework contains unsafe Java deserialization methods (CVE-2016-1000027).
    • com.herodevs.nes.springframework:spring-web:4.3.30-spring-framework-4.3.32

Notes

• Full Version: 4.3.30-spring-framework-4.3.32

4.3.31 (NES) - November 18, 2024

Notes

• This is the initial release of Spring Framework 4.3.30 from the open-source Spring Framework repository forked by HeroDevs.
• This release contains no functional changes from Spring Framework 4.3.30.
• Full Version: 4.3.30-spring-framework-4.3.31

Spring GraphQL

1.0.7 (NES) - December 23, 2024

Notes

• This release originates from the open-source Spring GraphQL repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring GraphQL 1.0.6.
• Full Version: 1.0.6-spring-graphql-1.0.7

Spring Hateoas

1.5.6 (NES) - November 12, 2024

Notes

• This release originates from the open-source Spring Hateoas repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful library builds. This release contains no functional changes from Spring Hateoas 1.5.6.
• Full Version: 1.5.6-spring-hateoas-1.5.7

Spring Integration

5.5.21 (NES) - November 15, 2024

Notes

• This release originates from the open-source Spring Integration repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Integration build 5.5.20.
• Full Version: 5.5.20-spring-integration-5.5.21

Spring Integration Extension for Amazon Web Services (AWS)

2.5.5 (NES) - December 20, 2024

Notes

• This release originates from the open-source Spring Integration Extension for Amazon Web Services (AWS) repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful library builds. This release contains no functional changes from Spring Integration Extension for AWS 2.5.4.
• Full Version: 2.5.4-spring-integration-aws-2.5.5

Spring Kafka

2.9.14 (NES) - November 15, 2024

Notes

• This release originates from the open-source Spring Kafka repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Kafka build 2.9.13.
• Full Version: 2.9.13-spring-kafka-2.9.14

Spring LDAP

2.4.5 (NES) - November 20, 2024

Notes

• This release originates from the 2.4.4 open-source Spring LDAP repository forked by HeroDevs.
• It includes the fix for CVE-2024-38829.
• Full Version: 2.4.4-spring-ldap-2.4.5

2.4.2 (NES) - August 30, 2024

Notes

• This release originates from the open-source Spring LDAP repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring LDAP 2.4.1.
• Full Version: 2.4.1-spring-ldap-2.4.2

Spring Plugin

2.0.1 (NES) - December 19, 2024

Notes

• This release originates from the open-source Spring Plugin repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful library builds. This release contains no functional changes from Spring Plugin 2.0.0.
• Full Version: 2.0.0-spring-plugin-2.0.1

Spring Retry

1.3.5 (NES) - October 11, 2024

Notes

• This release originates from the open-source Spring Retry repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Retry build 1.3.4.
• Full Version: 1.3.4-spring-retry-1.3.5

Spring Security

5.8.17 (NES) - November 19, 2024

Bug Fixes

• This patches the Spring Security Authorization Bypass for Case Sensitive Comparisons (CVE-2024-38827).
  • com.herodevs.nes.springframework.security:spring-security-cas:5.8.16-spring-security-5.8.17
  • com.herodevs.nes.springframework.security:spring-security-config:5.8.16-spring-security-5.8.17
  • com.herodevs.nes.springframework.security:spring-security-core:5.8.16-spring-security-5.8.17
  • com.herodevs.nes.springframework.security:spring-security-crypto:5.8.16-spring-security-5.8.17
  • com.herodevs.nes.springframework.security:spring-security-data:5.8.16-spring-security-5.8.17
  • com.herodevs.nes.springframework.security:spring-security-ldap:5.8.16-spring-security-5.8.17
  • com.herodevs.nes.springframework.security:spring-security-oauth2-client:5.8.16-spring-security-5.8.17
  • com.herodevs.nes.springframework.security:spring-security-taglibs:5.8.16-spring-security-5.8.17
  • com.herodevs.nes.springframework.security:spring-security-web:5.8.16-spring-security-5.8.17

Notes

• Full Version: 5.8.16-spring-security-5.8.17

Spring Security Kerberos

2.0.2 (NES) - December 18, 2024

Bug Fixes

• This release originates from the open-source Spring Security Kerberos repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful library builds. This release contains no functional changes from Spring Security Kerberos 2.0.1.
• Full Version: 2.0.1-spring-security-kerberos-2.0.2

5.8.16 (NES) - October 29, 2024

Bug Fixes

• This patches the Authorization Bypass of Static Resources in WebFlux Applications (CVE-2024-38821).
  • com.herodevs.nes.springframework.security:spring-security-web:5.8.15-spring-security-5.8.16

Notes

• Full Version: 5.8.15-spring-security-5.8.16

5.8.15 (NES) - September 20, 2024

Notes

• This release originates from the open-source Spring Security repository forked by HeroDevs starting with version 5.8.14.
• Includes other modifications implemented by HeroDevs to ensure successful library builds.
• Full Version: 5.8.14-spring-security-5.8.15

5.7.15 (NES) - November 19, 2024

Bug Fixes

• This patches the Spring Security Authorization Bypass for Case Sensitive Comparisons (CVE-2024-38827).
  • com.herodevs.nes.springframework.security:spring-security-cas:5.7.14-spring-security-5.7.15
  • com.herodevs.nes.springframework.security:spring-security-config:5.7.14-spring-security-5.7.15
  • com.herodevs.nes.springframework.security:spring-security-core:5.7.14-spring-security-5.7.15
  • com.herodevs.nes.springframework.security:spring-security-crypto:5.7.14-spring-security-5.7.15
  • com.herodevs.nes.springframework.security:spring-security-data:5.7.14-spring-security-5.7.15
  • com.herodevs.nes.springframework.security:spring-security-ldap:5.7.14-spring-security-5.7.15
  • com.herodevs.nes.springframework.security:spring-security-oauth2-client:5.7.14-spring-security-5.7.15
  • com.herodevs.nes.springframework.security:spring-security-taglibs:5.7.14-spring-security-5.7.15
  • com.herodevs.nes.springframework.security:spring-security-web:5.7.14-spring-security-5.7.15

Notes

• Full Version: 5.7.14-spring-security-5.7.15

5.7.14 (NES) - October 29, 2024

Bug Fixes

• This patches the Authorization Bypass of Static Resources in WebFlux Applications (CVE-2024-38821).
  • com.herodevs.nes.springframework.security:spring-security-web:5.7.13-spring-security-5.7.14

Notes

• Full Version: 5.7.13-spring-security-5.7.14

5.7.13 (NES) - August 26, 2024

Notes

• This release originates from the open-source Spring Security repository forked by HeroDevs starting with version 5.7.12.
• Includes other modifications implemented by HeroDevs to ensure successful library builds.
• Spring Security 5.7.12 includes Spring Framework 5.3.29. This release updates Spring Framework to NES version 5.3.40 which is equivalent to the original Spring Framework 5.3.39. For reference, here is a list of all included updates from Spring Framework included here:
  • v5.3.30
  • v5.3.31
  • v5.3.32
  • v5.3.33
  • v5.3.34
  • v5.3.35
  • v5.3.36
  • v5.3.37
  • v5.3.38
  • v5.3.39
• Full Version: 5.7.12-spring-security-5.7.13

4.2.22 (NES) - December 18, 2024

Bug Fixes

• This release patches the following:
  • Changing SecurityContext More Than Once in Single Request Can Fail to Save (CVE-2021-22112).
    • com.herodevs.nes.springframework.security:spring-security-web:4.2.20-spring-security-4.2.22
  • Authorization Bypass in RegexRequestMatcher (CVE-2022-22978).
    • com.herodevs.nes.springframework.security:spring-security-core:4.2.20-spring-security-4.2.22
    • com.herodevs.nes.springframework.security:spring-security-web:4.2.20-spring-security-4.2.22
  • Possible Broken Access Control in Spring Security With Direct Use of AuthenticatedVoter (CVE-2024-22257).
    • com.herodevs.nes.springframework.security:spring-security-core:4.2.20-spring-security-4.2.22
  • Spring Security Authorization Bypass for Case Sensitive Comparisons (CVE-2024-38827).
    • com.herodevs.nes.springframework.security:spring-security-cas:4.2.20-spring-security-4.2.22
    • com.herodevs.nes.springframework.security:spring-security-config:4.2.20-spring-security-4.2.22
    • com.herodevs.nes.springframework.security:spring-security-core:4.2.20-spring-security-4.2.22
    • com.herodevs.nes.springframework.security:spring-security-crypto:4.2.20-spring-security-4.2.22
    • com.herodevs.nes.springframework.security:spring-security-ldap:4.2.20-spring-security-4.2.22
    • com.herodevs.nes.springframework.security:spring-security-taglibs:4.2.20-spring-security-4.2.22
    • com.herodevs.nes.springframework.security:spring-security-web:4.2.20-spring-security-4.2.22

Notes

• Spring Security 4.2.22 NES release updates Spring Framework to NES version 4.3.32.
• Full Version: 4.2.20-spring-security-4.2.22

4.2.21 (NES) - November 7, 2024

Notes

• This is the initial release of Spring Security 4.2.20 from the open-source Spring Security repository forked by HeroDevs.
• This release contains no functional changes from Spring Security 4.2.20.
• Full Version: 4.2.20-spring-security-4.2.21

Spring Session

2.7.5 (NES) - October 28, 2024

Notes

• This release originates from the open-source Spring Session repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful library builds. This release contains no functional changes from Spring Session 2.7.4.
• Full Version: 2.7.4-spring-session-2.7.5

Spring Social

1.1.7 (NES) - December 16, 2024

Notes

• This release originates from the open-source Spring Social repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful library builds. This release contains no functional changes from Spring Social 1.1.6.RELEASE.
• Full Version: 1.1.6-spring-social-1.1.7

Spring Social Twitter

1.1.3 (NES) - December 17, 2024

Notes

• This release originates from the open-source Spring Social Twitter repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful library builds. This release contains no functional changes from Spring Social 1.1.2.RELEASE.
• Full Version: 1.1.2-spring-social-twitter-1.1.3

Spring Statemachine

3.2.2 (NES) - December 17, 2024

Notes

• This release originates from the open-source Spring Statemachine repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Statemachine 3.2.2.
• Full Version: 3.2.1-spring-statemachine-3.2.2

Spring Vault

2.3.5 (NES) - December 16, 2024

Notes

• This release originates from the open-source Spring Vault repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful library builds. This release contains no functional changes from Spring Vault 2.3.4.
• Full Version: 2.3.4-spring-vault-2.3.5

Spring Web Services (Spring-WS)

3.1.9 (NES) - October 15, 2024

Notes

• This release originates from the open-source Spring Web Services (Spring-WS) repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful library builds. This release contains no functional changes from Spring WS 3.1.8.
• Full Version: 3.1.8-spring-ws-3.1.9

Dozer

5.5.2 (NES) - September 5, 2024

Notes

• This release originates from the open-source DozerMapper repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds.
• This release contains no functional changes from DozerMapper version 5.5.1.
• Full Version: 5.5.1-dozer-5.5.2

MyBatis Parent

33.0.1 (NES) - September 5, 2024

Notes

• This release originates from the open-source MyBatis Parent repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds.
• This release contains no functional changes from MyBatis Parent version 33.
• Full Version: 33.0.0-mybatis-parent-33.0.1

MyBatis Spring

2.0.8 (NES) - September 5, 2024

Notes

• This release originates from the open-source MyBatis Spring repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds.
• This release contains no functional changes from MyBatis Spring version 2.0.7.
• Full Version: 2.0.7-mybatis-spring-2.0.8

SpringDoc OpenAPI

1.7.1 (NES) - September 5, 2024

Notes

• This release originates from the open-source SpringDoc OpenAPI repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds.
• This release contains no functional changes from SpringDoc OpenAPI version 1.7.0.
• Full Version: 1.7.0-springdoc-openapi-1.7.1

Struts

2.5.34 (NES) - September 5, 2024

Notes

• This release originates from the open-source Struts repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds.
• This release contains no functional changes from Struts version 2.5.33.
• Full Version: 2.5.33-struts2-2.5.34

Struts Parent

14.0.1 (NES) - September 5, 2024

Notes

• This release originates from the open-source Struts Master repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds.
• This release contains no functional changes from Struts Master 14.
• Full Version: 14.0.0-struts-master-14.0.1