NES for Spring

Legacy Spring versions still power mission-critical apps — but internal SLAs, CVE disclosures, and security audits don’t care.

Never-Ending Support (NES) for Spring keeps you compliant, secure, and audit-ready without an unplanned migration or risky patchwork.

Patch CVEs, Meet Internal SLAs, Pass Audits — in Minutes.

NES for Spring logo

Spring Boot Support Timeline

Explore the full lifecycle of major Spring Boot releases, including when OSS support ends, paid enterprise support begins, and HeroDevs steps in to extend it indefinitely.
OSS Support
Free OSS Suport
Broadcom Support
Tanzu Spring Paid Support
HeroDevs Support
HeroDevs Never-Ending Support
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
2027
2028
2029
2030
& Beyond
Boot 3.4.x
Boot 3.2.x
Boot 2.7.x
Boot 1.5.x

HeroDevs Supported Versions

HeroDevs provides full-stack coverage across the Spring ecosystem—including Framework, Security, Data, Cloud, Web,  and more—based on your selected Boot version. Choose a release below to see exactly what’s included in NES support.
Select version to view details below

What is included in NES for Spring Boot 1.5?

HeroDevs has support for the entire Spring Portfolio based on the versions that are managed by Boot 1.5. This includes:

Boot 1.5: EOL since August 2019
Framework 4.3: EOL since December 2020
Spring Retry 1.2
Spring Boot 1.5
Spring Framework 4.3
Spring Security JWT 1.1
Spring Social 1.1
Spring Social Twitter 1.1
Spring WS 2.4
Spring Session 1.3
+ more

What is included in NES for Spring Boot 2.7?

HeroDevs has support for the entire Spring Portfolio based on the versions that are managed by Boot 2.7. This includes:

Boot 2.7: EOL since June 2023
Framework 5.3: EOL since June 2023
Spring Boot 2.7
Spring Framework 5.3
Spring Security 5.7
Spring Security 5.8
Spring LDAP 2.4
Spring Integration 5.5
Spring for Apache Kakfa 2.8
Spring Session 2.7
Spring Batch 4.3
Spring Web Flow 2.5
Spring WS 3.1
+ more

What is included in NES for Spring Boot 3.2?

HeroDevs has support for the entire Spring Portfolio based on the versions that are managed by Boot 3.2. This includes:

Boot 3.2: EOL since Dec 2024
Framework 6.1: EOL planned June 2025
Spring Boot 3.2
Spring Framework 6.1
Spring Security 6.2
Spring Integration 6.2
Spring for Apache Kakfa 3.1
Spring Batch 5.1
Spring WS 4.0
Spring LDAP 3.2
Spring Session 3.2
+ more

What is included in NES for Spring Boot 3.4?

HeroDevs has support for the entire Spring Portfolio based on the versions that are managed by Boot 3.4. This includes:

Boot 3.4: EOL planned Dec 2025
Framework 6.2: EOL planned June 2026
Spring Boot 3.4
Spring Framework 6.2
Spring Security 6.4
Spring Integration 6.4
Spring for Apache Kakfa 3.3
Spring Batch 5.2
Spring WS 4.0
Spring LDAP 3.2
Spring Session 3.4
+ more
Vulnerability Remediation

37 EOL Security Issues Patched in NES for Spring
(and always looking for more)

If you're running legacy/unsupported versions of Spring, you're exposed. These aren't theoretical risks. They are real vulnerabilites that could get exploited tomorrow.

Never-Ending Support (NES) for Spring gives you a secure drop-in replacement without migrating a single line of code.

No scrambling. No rewrites. Just security updates delivered by a team that treats end-of-life like a starting line.
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
Medium
Spring
Spring Security
Authorization Bypass
<2.0.9, >=3.0.0, <3.0.9, >=3.1.0, <3.1.4
Dec 12, 2012
For more details on CVEs found in end-of-life software, visit our vulnerability directory.
Extended Version Support
Supports older Spring versions like Spring Boot 1.5 without requiring migration
Cost Flexibility
Customizable packages focus only on the Spring projects you’re actually using, eliminating unnecessary costs
Broad Ecosystem Support
Integrates with diverse infrastructures, fully vendor-neutral
Certified CVE Naming Authority (CNA)
Open Source Pledge
Direct Access to Spring Experts
Contributors actively involved in the Spring open-source community, offering personalized, knowledgeable support
HeroDevs Logo
NES for Spring
Green check icon
Green check icon
Green check icon
Green check icon
Green check icon
Green check icon
Tanzu Spring
Red cross icon
Could not verify
Poligon
Red cross icon
Could not verify
Poligon
Red cross icon
Could not verify
Poligon
Green check icon
Could not verify
Poligon
Red cross icon
Could not verify
Poligon
Green check icon
Could not verify
Poligon
Built for Flexibility, Not Forced Upgrades
Secure, Tailored Support for Spring Boot 1.5 and Beyond
Don't Compromise, Talk with HeroDevs Today
At HeroDevs, we meet you where your code is. Our Never-Ending Support for Spring delivers production-ready security patches, compliance coverage, and ongoing maintenance for older versions — no migration needed.

You're not just getting another vendor. You're getting a team of Spring experts who understands the framework inside out and ships fixes fast.

Join the growing number of teams staying secure without refactoring or blowing up timelines.

NES for Spring

is a secure drop-in replacement for

Spring

and is easy to set up.

Step 1
Update your Maven/Gradle file
Step 2
Set up token
Step 3
Build & Run

Related Products

If you're leveraging this technology, chances are you're also using complementary systems that face similar end-of-life (EOL) challenges.

Explore our related NES products that offer proactive, comprehensive support for your entire tech stack to ensure continuity, security, and innovation across all your essential technologies.

The Growing Security Gap

When Spring Boot 2.7.18 reached end-of-support in November 2023, security patches for managed dependencies stopped, creating a widening vulnerability gap for organizations still using this version. We maintain stability with the Spring ecosystem by following the same proven dependency management practices used by Broadcom's Spring team during official support. This means comprehensive testing and validation across the entire dependency tree.
Secure Cody

What is Never-Ending Support?

Security icon
Security Fixes
A new version of NES for Spring will be released each time we find, validate, and fix a security issue.
Compatibility icon
Drop-In Compatibility
A direct replacement for your framework—no migrations, no rewrites, just ongoing support.
SLA Compliance icon
SLA Compliance
HeroDevs provides SLAs that ensure compliance by providing incident response and remediation in accordance with industry-standard regulations, including SOC 2, FedRAMP, PCI, and HIPAA.
Learn more.
Team of Experts icon
Team of Experts
NES for Spring is built with advisement and consultation of contributors to Spring.
Easy to install icon
Easy to Install
Our simple drop-in replacement means all you have to do is change a few files and configurations and then rebuild your project. No code changes or find & replace required.
Shield icon
Intellectual Property Protection
NES for Spring is not only secure; HeroDevs also offers enterprise-level protection for all products.
Learn more.

The Problem We Solve

84%
of all codebases with open source components contained vulnerabilities.
Does your website contain vulnerabilities?
Chances are, if you are behind in adopting actively supported versions of the open-source software you are using, you are exposed.
Websites using unsupported software are at risk. (2024 Open Source Security and Risk Analysis Report)
HeroDevs provides Never-Ending Support for Spring, so you can keep using it and stay secure and supported.

Why HeroDevs?

Built By Spring Experts

Our team of Spring experts ensures our Never-Ending Support for Spring products are the same quality you have come to expect when using Spring open source projects.

We specifically design our NES for Spring products to work seamlessly and ensure they are as dependable as the original Spring projects you built your applications on.

Shield icon
Give back to open source icon
We Give Back To Open Source

HeroDevs is deeply committed to the open-source community. We support it through sponsorships, backing core contributors, and funding events that drive the ecosystem forward. Our engagement extends beyond financial contributions, embodying a commitment to the ongoing growth and innovation of open-source software. This holistic support ensures the vitality of the open-source movement, fostering an environment of collaboration and advancement.

We Partner With These Organizations

Leaping over technology stacks in a single bound!

Defeat Your Technical Villains

Whether it's continuous support through our Never-Ending Support (NES) library or our unparalleled professional services to get you migrated and moving forward, HeroDevs is to the rescue!

Contact Us

Got questions about Never-Ending Support for your open-source library? We're here to help!

Discover how HeroDevs NES Products can keep your systems secure and compliant.

Learn how our solutions can deliver value to your organization.

Get detailed pricing information tailored to your needs.

Trusted by industry leaders such as
Microsoft LogoBank Santander Logo
SAP LogoFinra LogoCapital One LogoGeneral Electric LogoUnqork LogoGoogle LogoValid 8 logoQueenslandRail logoGSA logoDepartment of Health logo
Talk to an Expert

By clicking “submit” I acknowledge receipt of our Privacy Policy.

Thank you! Your submission has been received!
Please enter a company email.