HeroDevs
Visit NES for Spring Home Page

Spring HATEOAS 1.5.x Release Notes

9 versions

Comprehensive release notes and changelog for Spring HATEOAS 1.5.x, including security patches, bug fixes, and feature updates across all supported versions.

Jun 15, 2026
Latest: 1.5.15
7 Patched Vulnerabilities
VEX Statements

June 2026

1.5.15

Released Jun 15, 2026
CVE-2026-41006
CVE-2026-41007
Full Version: 
1.5.6-spring-hateoas-1.5.15

Bug Fixes

  • Fixed PropertyUtils.createObjectFromProperties, used by the Collection+JSON and UBER media type deserializers, to consult Jackson access-control annotations so properties that should be ignored can no longer be set during deserialization (CVE-2026-41006).
  • Bounded the static StringLinkRelation cache to prevent memory exhaustion via endpoints that deserialize untrusted hypermedia or process client-supplied Link headers (CVE-2026-41007).

Dependency Upgrades

  • Spring Framework (NES) 5.3.39-spring-framework-5.3.52

April 2026

1.5.14

Released Apr 23, 2026
Full Version: 
1.5.6-spring-hateoas-1.5.14

Dependency Upgrades

  • Spring Framework (NES) 5.3.39-spring-framework-5.3.51

March 2026

1.5.13

Released Mar 25, 2026
Full Version: 
1.5.6-spring-hateoas-1.5.13

Dependency Upgrades

  • Spring Framework (NES) 5.3.39-spring-framework-5.3.50

October 2025

1.5.12

Released Oct 23, 2025
Full Version: 
1.5.6-spring-hateoas-1.5.12

Dependency Upgrades

  • Spring Framework (NES) 5.3.39-spring-framework-5.3.49

September 2025

1.5.11

Released Sep 23, 2025
Full Version: 
1.5.6-spring-hateoas-1.5.11

Dependency Upgrades

  • Spring Framework (NES) 5.3.39-spring-framework-5.3.48

August 2025

1.5.10

Released Aug 25, 2025
Full Version: 
1.5.6-spring-hateoas-1.5.10

Dependency Upgrades

  • Spring Framework (NES) 5.3.39-spring-framework-5.3.47

May 2025

1.5.9

Released May 20, 2025
Full Version: 
1.5.6-spring-hateoas-1.5.9

Dependency Upgrades

  • Spring Framework: 5.3.39-spring-framework-5.3.46
  • Spring Plugin: 2.0.0-spring-plugin-2.0.3

February 2025

1.5.8

Released Feb 24, 2025
Full Version: 
1.5.6-spring-hateoas-1.5.8

Notes

  • Publish Spring Hateoas under the org.springframework.hateoas group ID instead of com.herodevs.nes.springframework.hateoas

Dependency Upgrades

  • Spring Framework: 5.3.39-spring-framework-5.3.45
  • Spring Plugin: 2.0.0-spring-plugin-2.0.2

November 2024

1.5.6

Released Nov 12, 2024
Full Version: 
1.5.6-spring-hateoas-1.5.7

Notes

  • This release originates from the open‑source Spring Hateoas repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful library builds. This release contains no functional changes from Spring Hateoas 1.5.6. Full Version: 1.5.6-spring-hateoas-1.5.7

Stay in the loop

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.