Visit NES for Spring Home Page

Spring Boot 3.3.x Release Notes

5 versions

Comprehensive release notes and changelog for Spring Boot 3.3.x, including security patches, bug fixes, and feature updates across all supported versions.

Mar 25, 2026
Latest: 3.3.18
14 Patched Vulnerabilities
VEX Statements

March 2026

3.3.18

Released Mar 25, 2026
Full Version:
3.3.13-spring-boot-3.3.18

Bug Fixes

  • Patched Authentication Bypass under Actuator CloudFoundry endpoints vulnerability (CVE-2026-22733).

Dependency Upgrades

  • Glassfish JAXB 4.0.7
  • Jakarta XML WS 4.0.3
  • Jetty 12.0.33
  • Lombok 1.18.44
  • Spring AMQP (NES) 3.1.12-spring-amqp-3.1.17
  • Spring Authorization Server (NES) 1.3.7-spring-authorization-server-1.3.9
  • Spring Batch (NES) 5.1.3-spring-batch-5.1.9
  • Spring Data BOM (NES) 2024.0.13-spring-data-bom-2024.0.15
  • Spring Framework (NES) 6.1.21-spring-framework-6.1.26
  • Spring GraphQL (NES) 1.3.7-spring-graphql-1.3.9
  • Spring HATEOAS (NES) 2.3.4-spring-hateoas-2.3.6
  • Spring Integration (NES) 6.3.11-spring-integration-6.3.13
  • Spring Kafka (NES) 3.2.10-spring-kafka-3.2.12
  • Spring LDAP (NES) 3.2.16-spring-ldap-3.2.19
  • Spring Pulsar (NES) 1.1.13-spring-pulsar-1.1.15
  • Spring Security (NES) 6.3.10-spring-security-6.3.12
  • Spring Session (NES) 3.3.7-spring-session-3.3.9
  • Spring Web Services (NES) 4.0.17-spring-ws-4.0.19
  • Undertow 2.3.24.Final

February 2026

3.3.17

Released Feb 25, 2026
Full Version:
3.3.13-spring-boot-3.3.17

Bug Fixes

  • Fixed TLSv1.3 cipher configuration being silently ignored after Tomcat 10.1.52 upgrade. Applications that configured TLSv1.3 ciphers via server.ssl.ciphers or via options.ciphers in an SSL Bundle would have those ciphers silently dropped, falling back to all default ciphers.

Dependency Upgrades

  • Infinispan 15.0.22.Final
  • Jakarta XML Bind 4.0.5
  • Jetty 12.0.32
  • Logback 1.5.32
  • Neo4j Java Driver 5.28.10
  • Netty 4.1.131.Final
  • Postgresql 42.7.10
  • Tomcat 10.1.52
  • Undertow 2.3.23.Final
  • jOOQ 3.19.30

January 2026

3.3.16

Released Jan 28, 2026
Full Version:
3.3.13-spring-boot-3.3.16

Dependency Upgrades

  • Classmate 1.7.3
  • Groovy 4.0.30
  • Jaybird 5.0.11.java11
  • Logback 1.5.26
  • Pooled JMS 3.1.9
  • Postgresql 42.7.9
  • R2DBC MSSQL 1.0.4.RELEASE
  • Undertow 2.3.22.Final

December 2025

3.3.15

Released Dec 18, 2025
Full Version:
3.3.13-spring-boot-3.3.15

Dependency Upgrades

  • AspectJ 1.9.25.1
  • Logback 1.5.22
  • Netty 4.1.130.Final
  • Pooled JMS 3.1.8
  • Spring GraphQL (NES) 1.3.7-spring-graphql-1.3.8
  • Spring LDAP (NES) 3.2.16-spring-ldap-3.2.18
  • Spring WS 4.0.17
  • Tomcat 10.1.50

3.3.14

Released Dec 10, 2025
Full Version:
3.3.13-spring-boot-3.3.14

Notes

  • This release originates from the open‑source Spring Boot repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Boot 3.3.13.

Dependency Upgrades

  • Angus Mail 2.0.5
  • AspectJ 1.9.25
  • Classmate 1.7.1
  • Ehcache3 3.10.9
  • Glassfish JAXB 4.0.6
  • Groovy 4.0.29
  • Hibernate Validator 8.0.3.Final
  • Infinispan 15.0.21.Final
  • Jakarta Activation 2.1.4
  • Jakarta Mail 2.1.5
  • Jakarta XML Bind 4.0.4
  • Jaybird 5.0.10.java11
  • Jersey 3.1.11
  • Jetty Reactive HTTPClient 4.0.13
  • Jetty 12.0.31
  • Logback 1.5.21
  • Lombok 1.18.42
  • MSSQL JDBC 12.6.5.jre11
  • Netty 4.1.128.Final
  • Postgresql 42.7.8
  • R2DBC H2 1.0.1.RELEASE
  • R2DBC MSSQL 1.0.3.RELEASE
  • R2DBC Postgresql 1.0.9.RELEASE
  • RxJava3 3.1.12
  • Spring AMQP (NES) 3.1.12-spring-amqp-3.1.16
  • Spring Authorization Server (NES) 1.3.7-spring-authorization-server-1.3.8
  • Spring Batch (NES) 5.1.3-spring-batch-5.1.8
  • Spring Data BOM (NES) 2024.0.13-spring-data-bom-2024.0.14
  • Spring Framework (NES) 6.1.21-spring-framework-6.1.25
  • Spring GraphQL 1.3.6
  • Spring HATEOAS (NES) 2.3.4-spring-hateoas-2.3.5
  • Spring Integration (NES) 6.3.11-spring-integration-6.3.12
  • Spring Kafka (NES) 3.2.10-spring-kafka-3.2.11
  • Spring LDAP (NES) 3.2.13-spring-ldap-3.2.17
  • Spring Pulsar (NES) 1.1.13-spring-pulsar-1.1.14
  • Spring RESTDocs 3.0.5
  • Spring Security (NES) 6.3.10-spring-security-6.3.11
  • Spring Session (NES) 3.3.7-spring-session-3.3.8
  • Spring WS 4.0.16
  • Tomcat 10.1.49
  • Undertow 2.3.20.Final
  • jOOQ 3.19.29Full Version: 3.3.13-spring-boot-3.3.14

Stay in the loop

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.