HeroDevs
Visit NES for Spring Home Page

Spring Data KeyValue 2.5.x Release Notes

4 versions

Comprehensive release notes and changelog for Spring Data KeyValue 2.5.x, including security patches, bug fixes, and feature updates across all supported versions.

Jun 15, 2026
Latest: 2.5.16
5 Patched Vulnerabilities
VEX Statements

June 2026

2.5.16

Released Jun 15, 2026
CVE-2026-41719
Full Version: 
2.5.12-spring-data-keyvalue-2.5.16

Bug Fixes

  • Refactored SpelPropertyComparator to avoid evaluating attacker-controlled property names as SpEL, closing a SpEL injection vulnerability when unsanitized input is passed as a Sort into a repository query method (CVE-2026-41719).

Dependency Upgrades

  • Spring Data Build (NES) 2.5.12-spring-data-build-2.5.16
  • Spring Data Commons (NES) 2.5.12-spring-data-commons-2.5.16

April 2026

2.5.15

Released Apr 23, 2026
Full Version: 
2.5.12-spring-data-keyvalue-2.5.15

Dependency Upgrades

  • Spring Data Build (NES) 2.5.12-spring-data-build-2.5.15
  • Spring Data Commons (NES) 2.5.12-spring-data-commons-2.5.15

March 2026

2.5.14

Released Mar 25, 2026
Full Version: 
2.5.12-spring-data-keyvalue-2.5.14

Dependency Upgrades

  • Spring Data Build (NES) 2.5.12-spring-data-build-2.5.14
  • Spring Data Commons (NES) 2.5.12-spring-data-commons-2.5.14

2.5.13

Released Mar 11, 2026
Full Version: 
2.5.12-spring-data-keyvalue-2.5.13

Notes

  • This release originates from the open‑source Spring Data KeyValue repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Data KeyValue 2.5.12.

Dependency Upgrades

  • Spring Data Build (NES) 2.5.12-spring-data-build-2.5.13
  • Spring Data Commons (NES) 2.5.12-spring-data-commons-2.5.13

Stay in the loop

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.