HeroDevs
Visit NES for Spring Home Page

Spring LDAP Release Notes

18 versions

Comprehensive release notes and changelog for Spring LDAP, detailing HeroDevs-provided security patches across all supported versions.

Apr 23, 2026
Latest: 2.3.11
2 Patched Vulnerabilities
VEX Statements

April 2026

3.2.20

Released Apr 23, 2026
Full Version: 
3.2.16-spring-ldap-3.2.20

Dependency Upgrades

  • Spring Framework (NES) 6.1.21-spring-framework-6.1.27

2.4.12

Released Apr 23, 2026
Full Version: 
2.4.4-spring-ldap-2.4.12

Dependency Upgrades

  • Spring Framework (NES) 5.3.39-spring-framework-5.3.51
  • Spring Security (NES) 5.8.16-spring-security-5.8.21

2.3.11

Released Apr 23, 2026
Full Version: 
2.3.8-spring-ldap-2.3.11

March 2026

3.2.19

Released Mar 25, 2026
Full Version: 
3.2.16-spring-ldap-3.2.19

Dependency Upgrades

  • Spring Framework (NES) 6.1.21-spring-framework-6.1.26

2.4.11

Released Mar 25, 2026
Full Version: 
2.4.4-spring-ldap-2.4.11

Dependency Upgrades

  • Spring Framework (NES) 5.3.39-spring-framework-5.3.50
  • Spring Security (NES) 5.8.16-spring-security-5.8.26

2.3.10

Released Mar 25, 2026
Full Version: 
2.3.8-spring-ldap-2.3.10

Dependency Upgrades

  • Spring Framework (NES) 4.3.30-spring-framework-4.3.37
  • Spring Security (NES) 4.2.20-spring-security-4.2.29

2.3.9

Released Mar 11, 2026
CVE-2024-38829
Full Version: 
2.3.8-spring-ldap-2.3.9

Bug Fixes

  • Authentication bypass vulnerability (CVE-2024-38829).
    • org.springframework.ldap:spring-ldap-core:2.3.8-spring-ldap-2.3.9

Notes

  • This release originates from the open‑source Spring LDAP repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring LDAP 2.3.8.

Dependency Upgrades

  • Spring Framework (NES) 4.3.30-spring-framework-4.3.36
  • Spring Security (NES) 4.2.20-spring-security-4.2.28

December 2025

3.2.18

Released Dec 18, 2025
Full Version: 
3.2.16-spring-ldap-3.2.18

Notes

  • This release originates from the open‑source Spring LDAP repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring LDAP 3.2.16.

October 2025

3.2.17

Released Oct 24, 2025
Full Version: 
3.2.13-spring-ldap-3.2.17

Dependency Upgrades

  • Spring Framework (NES) 6.1.21-spring-framework-6.1.25

2.4.10

Released Oct 23, 2025
Full Version: 
2.4.4-spring-ldap-2.4.10

Dependency Upgrades

  • Spring Framework (NES) 5.3.39-spring-framework-5.3.49

September 2025

3.2.16

Released Sep 23, 2025
Full Version: 
3.2.13-spring-ldap-3.2.16

Dependency Upgrades

  • Spring Framework (NES) 6.1.21-spring-framework-6.1.24

August 2025

2.4.8

Released Aug 25, 2025
Full Version: 
2.4.4-spring-ldap-2.4.8

Dependency Upgrades

  • Spring Data BOM (NES) 2021.2.18-spring-data-bom-2021.2.21
  • Spring Framework (NES) 5.3.39-spring-framework-5.3.47
  • Spring Security (NES) 5.8.16-spring-security-5.8.22

3.2.15

Released Aug 22, 2025
Full Version: 
3.2.13-spring-ldap-3.2.15

Dependency Upgrades

  • Spring Framework (NES) 6.1.21-spring-framework-6.1.23

July 2025

3.2.14

Released Jul 15, 2025
Full Version: 
3.2.13-spring-ldap-3.2.14

Notes

  • This release originates from the open‑source Spring LDAP repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring LDAP 3.2.13.

Dependency Upgrades

  • Spring Framework (NES) 6.1.21-spring-framework-6.1.22Full Version: 3.2.13-spring-ldap-3.2.14

May 2025

2.4.7

Released May 19, 2025
Full Version: 
2.4.4-spring-ldap-2.4.7

Dependency Upgrades

  • Spring Framework (NES): 5.3.39-spring-framework-5.3.46

February 2025

2.4.6

Released Feb 24, 2025
Full Version: 
2.4.4-spring-ldap-2.4.6

Notes

  • Publish Spring LDAP under the org.springframework.ldap group ID instead of com.herodevs.nes.springframework.ldap

Dependency Upgrades

  • Spring Framework (NES): 5.3.39-spring-framework-5.3.45

November 2024

2.4.5

Released Nov 20, 2024
CVE-2024-38829
Full Version: 
2.4.4-spring-ldap-2.4.5

Notes

August 2024

2.4.2

Released Aug 30, 2024
Full Version: 
2.4.1-spring-ldap-2.4.2

Notes

  • This release originates from the open‑source Spring LDAP repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring LDAP 2.4.1. Full Version: 2.4.1-spring-ldap-2.4.2

Stay in the loop

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.