HeroDevs
Visit NES for Spring Home Page

Spring HATEOAS 1.3.x Release Notes

6 versions

Comprehensive release notes and changelog for Spring HATEOAS 1.3.x, including security patches, bug fixes, and feature updates across all supported versions.

Aug 28, 2026
Latest: 1.3.13
11 Patched Vulnerabilities
VEX Statements

August 2026

1.3.13

Released Aug 28, 2026
Full Version: 
1.3.7-spring-hateoas-1.3.13

Dependency Upgrades

  • Spring Framework (NES) 5.3.39-spring-framework-5.3.54
  • Spring Plugin (NES) 2.0.0-spring-plugin-2.0.10

July 2026

1.3.12

Released Jul 31, 2026
CVE-2026-41006
CVE-2026-41007
Full Version: 
1.3.7-spring-hateoas-1.3.12

Security Fixes

  • Fixed PropertyUtils.createObjectFromProperties, used by the Collection+JSON and UBER media type deserializers, to consult Jackson access-control annotations so properties that should be ignored can no longer be set during deserialization (CVE-2026-41006).
  • Bounded the static StringLinkRelation cache to prevent memory exhaustion via endpoints that deserialize untrusted hypermedia or process client-supplied Link headers (CVE-2026-41007).

Dependency Upgrades

  • Spring Framework (NES) 5.3.39-spring-framework-5.3.53

June 2026

1.3.11

Released Jun 15, 2026
Full Version: 
1.3.7-spring-hateoas-1.3.11

Dependency Upgrades

  • Spring Framework (NES) 5.3.39-spring-framework-5.3.52

April 2026

1.3.10

Released Apr 23, 2026
Full Version: 
1.3.7-spring-hateoas-1.3.10

Dependency Upgrades

  • Spring Framework (NES) 5.3.39-spring-framework-5.3.51

March 2026

1.3.9

Released Mar 25, 2026
Full Version: 
1.3.7-spring-hateoas-1.3.9

Dependency Upgrades

  • Spring Framework (NES) 5.3.39-spring-framework-5.3.50

1.3.8

Released Mar 11, 2026
CVE-2023-34036
Full Version: 
1.3.7-spring-hateoas-1.3.8

Security Fixes

Notes

  • This release originates from the open‑source Spring HATEOAS repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring HATEOAS 1.3.7.

Dependency Upgrades

  • Spring Framework (NES) 5.3.39-spring-framework-5.3.49

Stay in the loop

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.