HeroDevs
Visit NES for Spring Home Page

Spring Integration 6.3.x Release Notes

1 version

Comprehensive release notes and changelog for Spring Integration 6.3.x, including security patches, bug fixes, and feature updates across all supported versions.

Dec 10, 2025
Latest: 6.3.12
3 Patched Vulnerabilities
VEX Statements

December 2025

6.3.12

Released on Dec 10, 2025
CVE-2025-41254
Full Version: 
6.3.11-spring-integration-6.3.12

Notes

  • This release originates from the open‑source Spring Integration repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds.
  • The recent CVE-2025-41254 patch for Spring Framework (NES) 6.1.25 required an update to Spring Integration's websocket integration. This change updates the websocket integration with Spring Framework to register a client session with a STOMP CONNECT frame. See the following related GitHub issue for additional details.

Dependency Upgrades

  • Spring AMQP (NES) 3.1.12-spring-amqp-3.1.16
  • Spring Data BOM (NES) 2024.0.13-spring-data-bom-2024.0.14
  • Spring Framework (NES) 6.1.21-spring-framework-6.1.25
  • Spring Kafka (NES) 3.2.10-spring-kafka-3.2.11
  • Spring Security (NES) 6.3.10-spring-security-6.3.11Full Version: 6.3.11-spring-integration-6.3.12

Stay in the loop

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.