NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
Maven Central · #151 by repository stars
Spring Commons Logging Bridge
Last release 4 months ago
08 Jun 2026
Ships on a steady schedule
a new release about every 4 weeks
Rarely documented
notes for 3 of the last 60 stable releases
Nothing withdrawn
no release was ever pulled
9 years old
174 releases · first in 2017
CVE-2026-41838 "Spring Framework Predictable Session ID in WebSocket Module"
This maintenance release fixes a high number of CVEs. You can learn more about this in the "Spring and Security In The Times Of AI" blog post. Here is the full list of 16 CVEs:
AntPathMatcher #36886ClassLoader from DefaultDeserializer #36839NullValue instances in AbstractValueAdaptingCache #36728CookieLocaleResolver#setLocaleContext #36870ConfigurationClassParser incorrectly removes component-scanned bean when the same class is also registered under a different name via XML #36849One column per quarter.
Add missing @Deprecated (forRemoval = true) for deleted in 7.0 #36591
SpringValidatorAdapter and MethodValidationAdapter performance #36624@Deprecated(forRemoval = true) for deleted in 7.0 #36591methodIdentification() in CacheAspectSupport for removal #36576CoroutineUtils #36643@Sql fails if DataSource is wrapped in a TransactionAwareDataSourceProxy #36630MergedAnnotation does not use ClassLoader for method or field #36614AnnotationBeanNameGenerator fails when an annotation references a non-existent class #36588FileSystemResource does not strictly follow the Resource#isReadable() contract #36585DefaultJmsListenerContainer may hang in an endless loop in doShutdown #36511spring.profiles.active is ignored by @ActiveProfiles #36636MergedAnnotation.asAnnotationAttributes() Javadoc incorrectly states that it creates an immutable map #36568@MockitoBean, etc.) #36542Leverage ResourceHandlerUtils in ScriptTemplateView #36459
ResourceHandlerUtils in ScriptTemplateView #36459ScriptTemplateViewTests #36457ConfigurationClassBeanDefinitionReader #36454AbstractTestContextBootstrapper #36431@javax.validation.Constraint from convention-based annotation attribute override check #36412MediaType(MediaType, Charset) constructor #36351@Fallback alongside Primary in the reference manual and @Bean Javadoc #36441BeanPostProcessor and BeanFactoryPostProcessor #36436UriComponentsBuilder and polish examples #36406@Configuration classes over XML and Groovy in testing chapter #36394Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Your coding agent can read these notes before it upgrades. Set up the MCP server →