HeroDevs
Visit NES for Spring Home Page

Spring Authorization Server 1.2.x Release Notes

6 versions

Comprehensive release notes and changelog for Spring Authorization Server 1.2.x, including security patches, bug fixes, and feature updates across all supported versions.

Apr 23, 2026
Latest: 1.2.13
3 Patched Vulnerabilities
VEX Statements

April 2026

1.2.13

Released Apr 23, 2026
CVE-2026-22752
Full Version: 
1.2.7-spring-authorization-server-1.2.13

Bug Fixes

  • Patched the critical Spring Authorization Server authorization bypass in Dynamic Client Registration where insufficient validation of client metadata could allow an attacker with a valid Initial Access Token to register a malicious client, leading to stored XSS, privilege escalation, or SSRF (CVE-2026-22752).

Dependency Upgrades

  • Spring Framework (NES) 6.1.21-spring-framework-6.1.27
  • Spring Security (NES) 6.2.8-spring-security-6.2.15

March 2026

1.2.12

Released Mar 25, 2026
Full Version: 
1.2.7-spring-authorization-server-1.2.12

Dependency Upgrades

  • Spring Framework (NES) 6.1.21-spring-framework-6.1.26
  • Spring Security (NES) 6.2.8-spring-security-6.2.14

October 2025

1.2.11

Released Oct 24, 2025
Full Version: 
1.2.7-spring-authorization-server-1.2.11

Dependency Upgrades

  • Spring Framework (NES) 6.1.21-spring-framework-6.1.25
  • Spring Security (NES) 6.2.8-spring-security-6.2.13

September 2025

1.2.10

Released Sep 23, 2025
Full Version: 
1.2.7-spring-authorization-server-1.2.10

Dependency Upgrades

  • Spring Framework (NES) 6.1.21-spring-framework-6.1.24
  • Spring Security (NES) 6.2.8-spring-security-6.2.12

August 2025

1.2.9

Released Aug 22, 2025
Full Version: 
1.2.7-spring-authorization-server-1.2.9

Dependency Upgrades

  • Spring Framework (NES) 6.1.21-spring-framework-6.1.23
  • Spring Security (NES) 6.2.8-spring-security-6.2.11

July 2025

1.2.8

Released Jul 15, 2025
Full Version: 
1.2.7-spring-authorization-server-1.2.8

Notes

  • This release originates from the open‑source Spring Authorization Server repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Authorization Server 1.2.7.

Dependency Upgrades

  • Spring Framework (NES) 6.1.21-spring-framework-6.1.22
  • Spring Security (NES) 6.2.8-spring-security-6.2.10Full Version: 1.2.7-spring-authorization-server-1.2.8

Stay in the loop

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.