HeroDevs
Visit NES for Spring Home Page

Spring LDAP 2.3.x Release Notes

1 version

Comprehensive release notes and changelog for Spring LDAP 2.3.x, including security patches, bug fixes, and feature updates across all supported versions.

Mar 11, 2026
Latest: 2.3.9
2 Patched Vulnerabilities
VEX Statements

March 2026

2.3.9

Released last Wednesday
CVE-2024-38829
Full Version: 
2.3.8-spring-ldap-2.3.9

Bug Fixes

  • Authentication bypass vulnerability (CVE-2024-38829).
    • org.springframework.ldap:spring-ldap-core:2.3.8-spring-ldap-2.3.9

Notes

  • This release originates from the open‑source Spring LDAP repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring LDAP 2.3.8.

Dependency Upgrades

  • Spring Framework (NES) 4.3.30-spring-framework-4.3.36
  • Spring Security (NES) 4.2.20-spring-security-4.2.28

Stay in the loop

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.