Spring Boot version lifecycle
framework · Broadcom (Spring)
Current status
Supported version lines, end-of-life status, and latest releases for Spring Boot — derived from official vendor sources, not third-party EOL aggregators.
Spring Boot helps build production-grade Spring applications with embedded servers, starters, and opinionated auto-configuration.
Security: 12 tracked advisories. Details below — lifecycle and vulnerability status are separate.
Official site →Version lines
23
Supported
22
EOL lines
0
Latest stable
4.1.1
2026-08-20
Releases tracked
282
At a glance
Latest release
4.1.1
Line 4.1
Recommended support line
4.1
standard support
Status
STANDARD SUPPORT
Newest supported: 4.1
EOL
Not published
Exact date not officially published
Recommended line: 4.1 (newest supported line with lowest lifecycle risk — not blindly “latest”).
Supported versions
22 currently supported release lines.
| Version line | Lifecycle | Latest release | Released | EOL | Risk |
|---|---|---|---|---|---|
| 4.1 | standard supportlow | 4.1.1 | 2026-08-20 | Not officially published | low |
| 4.0 | standard supportlow | 4.0.8 | 2026-08-21 | Not officially published | low |
| 3.5 | standard supportlow | 3.5.16 | 2026-06-25 | Not officially published | low |
| 3.4 | standard supportlow | 3.4.13 | 2025-12-18 | Not officially published | low |
| 3.3 | standard supportlow | 3.3.13 | 2025-06-19 | Not officially published | low |
| 3.2 | standard supportlow | 3.2.12 | 2024-11-21 | Not officially published | low |
| 3.1 | standard supportlow | 3.1.12 | 2024-05-23 | Not officially published | low |
| 3.0 | standard supportlow | 3.0.13 | 2023-11-23 | Not officially published | low |
| 2.7 | standard supportlow | 2.7.18 | 2023-11-23 | Not officially published | low |
| 2.6 | standard supportlow | 2.6.15 | 2023-05-18 | Not officially published | low |
| 2.5 | standard supportlow | 2.5.15 | 2023-05-18 | Not officially published | low |
| 2.4 | standard supportlow | 2.4.13 | 2021-11-18 | Not officially published | low |
| 2.3 | standard supportlow | 2.3.12 | 2021-06-10 | Not officially published | low |
| 2.2 | standard supportlow | 2.2.13 | 2021-01-14 | Not officially published | low |
| 2.1 | standard supportlow | 2.1.18 | 2020-10-29 | Not officially published | low |
| 2.0 | standard supportlow | 2.0.9 | 2019-04-03 | Not officially published | low |
| 1.5 | standard supportlow | 1.5.22 | 2019-08-06 | Not officially published | low |
| 1.4 | standard supportlow | 1.4.7 | 2023-09-11 | Not officially published | low |
| 1.3 | standard supportlow | 1.3.8 | 2023-09-11 | Not officially published | low |
| 1.2 | standard supportlow | 1.2.8 | 2023-09-11 | Not officially published | low |
| 1.1 | standard supportlow | 1.1.12 | 2023-09-11 | Not officially published | low |
| 1.0 | standard supportlow | 1.0.2 | 2023-09-11 | Not officially published | low |
Lifecycle overview
Support windows from official lifecycle periods. Empty segments mean no dated period for that phase.
- 4.1standard supportstandard support
- 4.0standard supportstandard support
- 3.5standard supportstandard support
- 3.4standard supportstandard support
- 3.3standard supportstandard support
- 3.2standard supportstandard support
- 3.1standard supportstandard support
- 3.0standard supportstandard support
- 2.7standard supportstandard support
- 2.6standard supportstandard support
- 2.5standard supportstandard support
- 2.4standard supportstandard support
- 2.3standard supportstandard support
- 2.2standard supportstandard support
- 2.1standard supportstandard support
- 2.0standard supportstandard support
Showing 16 of 22 lines with lifecycle periods. See the directory below for the full list.
Known vulnerabilities
Recent OSV.dev advisories mapped to this product. CVSS/CWE from NVD and known-exploited status from CISA KEV when available. CompatHub is not the original vulnerability authority.
- CVE-2026-40977
- Affected:
- >=4.0.0,<4.0.6
- Fixed in:
- 4.0.6
- Source:
- OSV source · Advisory
- CVE-2026-40976
- Affected:
- >=4.0.0,<4.0.6
- Fixed in:
- 4.0.6
- Source:
- OSV source · Advisory
- CVE-2026-40975
- Affected:
- >=4.0.0,<4.0.6
- Fixed in:
- 4.0.6
- Source:
- OSV source · Advisory
- CVE-2026-40974
- Affected:
- >=4.0.0,<4.0.6
- Fixed in:
- 4.0.6
- Source:
- OSV source · Advisory
- CVE-2026-40973
- Affected:
- >=4.0.0,<4.0.6
- Fixed in:
- 4.0.6
- Source:
- OSV source · Advisory
- CVE-2026-40972
- Affected:
- >=4.0.0,<4.0.6
- Fixed in:
- 4.0.6
- Source:
- OSV source · Advisory
- CVE-2026-40971
- Affected:
- >=4.0.0,<4.0.6
- Fixed in:
- 4.0.6
- Source:
- OSV source · Advisory
- CVE-2026-40970
- Affected:
- >=4.0.0,<4.0.6
- Fixed in:
- 4.0.6
- Source:
- OSV source · Advisory
- CVE-2026-22733
Authentication Bypass under Actuator CloudFoundry endpoints
- Affected:
- >=4.0.0,<4.0.4
- Fixed in:
- 4.0.4
- Source:
- OSV source · Advisory
- CVE-2026-22731
Authentication Bypass under Actuator Health groups paths
- Affected:
- >=4.0.0,<4.0.4
- Fixed in:
- 4.0.4
- Source:
- OSV source · Advisory
- CVE-2023-34055
Spring Boot server Web Observations DoS Vulnerability
- Affected:
- >=3.1.0,<=3.1.5
- Source:
- OSV source · Advisory
- CVE-2023-20883
- Affected:
- >=3.0.0,<2.5.14
- Fixed in:
- 2.5.14
- Source:
- OSV source · Advisory
Compare versions
Side-by-side view of the most relevant release lines.
Recent releases
Latest release date 2026-08-20 · 2 in last 30 days · 6 in last 90 days
- 2026-08-21
- 2026-08-20
- 2026-06-25
- 2026-06-10
- 2026-06-10
- 2026-06-10
- 2026-04-23
- 2026-04-23
- 2026-03-26
- 2026-03-26
Should I upgrade?
Current versions are supported
The preferred supported release line is Spring Boot 4.1 (standard support).
Compatibility
Evidence-backed Spring Boot compatibility results from declared requirements — open the Compatibility Explorer for the full matrix.
- ✓Spring Boot 4.1 → OpenJDK 21
- ✓Spring Boot 4.1 → OpenJDK 26
- ✓Spring Boot 4.1 → OpenJDK 25
- ✓Spring Boot 4.1 → OpenJDK 17
- ✓Spring Boot 4.0 → OpenJDK 21
- ✓Spring Boot 4.0 → OpenJDK 26
- ✓Spring Boot 4.0 → OpenJDK 25
- ✓Spring Boot 4.0 → OpenJDK 17
- ✓Spring Boot 3.5 → OpenJDK 21
- ✓Spring Boot 3.5 → OpenJDK 25
- ✓Spring Boot 3.5 → OpenJDK 17
- ✓Spring Boot 3.4 → OpenJDK 21
Data coverage
- Version lines
- 23
- Concrete releases
- 282
- Supported lines
- 22
- EOL lines
- 0
- Lifecycle coverage
- 22/23
- EOL coverage
- 0/23
- Provenance coverage
- 22/23
Data freshness
Last checked = last successful upstream check. Latest source update = when upstream content last changed.
- Data last checked
- 2026-09-01
- Latest source update
- 2026-09-01
Sources
First-party and other registered sources contributing release and lifecycle facts.
- Spring Boot GitHub Releasesfirst party · high
Official source: https://api.github.com/repos/spring-projects/spring-boot/releases
Last verified 2026-09-01
- OSV.devfirst party
Official source: https://osv.dev
Last checked 2026-09-01
- NVD (NIST)first party
Official source: https://nvd.nist.gov
Last checked 2026-09-01
- CISA Known Exploited Vulnerabilitiesfirst party
Official source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Last checked 2026-09-01
- Spring Boot support policyfirst party
Official source: https://github.com/spring-projects/spring-boot/wiki/Supported-Versions
Last checked 2026-09-01
- Spring Boot releases APIfirst party
Official source: https://api.spring.io/projects/spring-boot/releases
Last checked 2026-09-01
- Spring Boot Java system requirementsfirst party
Official source: https://docs.spring.io/spring-boot/
Last checked 2026-09-01
Version line directory
Complete navigation into detailed version-line pages.
Currently supported
| Version line | Status | Latest release | Released | EOL |
|---|---|---|---|---|
| 4.1 | standard supportlow | 4.1.1 | 2026-08-20 | Not officially published |
| 4.0 | standard supportlow | 4.0.8 | 2026-08-21 | Not officially published |
| 3.5 | standard supportlow | 3.5.16 | 2026-06-25 | Not officially published |
| 3.4 | standard supportlow | 3.4.13 | 2025-12-18 | Not officially published |
| 3.3 | standard supportlow | 3.3.13 | 2025-06-19 | Not officially published |
| 3.2 | standard supportlow | 3.2.12 | 2024-11-21 | Not officially published |
| 3.1 | standard supportlow | 3.1.12 | 2024-05-23 | Not officially published |
| 3.0 | standard supportlow | 3.0.13 | 2023-11-23 | Not officially published |
| 2.7 | standard supportlow | 2.7.18 | 2023-11-23 | Not officially published |
| 2.6 | standard supportlow | 2.6.15 | 2023-05-18 | Not officially published |
| 2.5 | standard supportlow | 2.5.15 | 2023-05-18 | Not officially published |
| 2.4 | standard supportlow | 2.4.13 | 2021-11-18 | Not officially published |
| 2.3 | standard supportlow | 2.3.12 | 2021-06-10 | Not officially published |
| 2.2 | standard supportlow | 2.2.13 | 2021-01-14 | Not officially published |
| 2.1 | standard supportlow | 2.1.18 | 2020-10-29 | Not officially published |
| 2.0 | standard supportlow | 2.0.9 | 2019-04-03 | Not officially published |
| 1.5 | standard supportlow | 1.5.22 | 2019-08-06 | Not officially published |
| 1.4 | standard supportlow | 1.4.7 | 2023-09-11 | Not officially published |
| 1.3 | standard supportlow | 1.3.8 | 2023-09-11 | Not officially published |
| 1.2 | standard supportlow | 1.2.8 | 2023-09-11 | Not officially published |
| 1.1 | standard supportlow | 1.1.12 | 2023-09-11 | Not officially published |
| 1.0 | standard supportlow | 1.0.2 | 2023-09-11 | Not officially published |
Archive / no vendor EOL schedule
Lines without a published support schedule from the vendor.
| Version line | Status | Latest release | Released | EOL |
|---|---|---|---|---|
| 4.2 | unknownmedium | — | — | Not officially published |