Community EOL and its impact
OpenLogic provides Spring LTS support for three years, from 2025 through 2028, ensuring continued maintenance and security updates beyond the community end-of-life dates.
When Spring versions reach end of community support, they no longer receive updates from open-source maintainers.
Community EOL dates
| Component | Community EOL date | End of OpenLogic Spring LTS |
|---|---|---|
|
Spring Boot 2.7.x |
June 2023 |
October 2027 |
|
Spring Boot 2.5.x |
May 2022 |
May 2026 |
|
Spring Boot 3.1.x |
June 2024 |
June 2028 |
|
Spring Boot 3.2.x |
December 2024 |
June 2028 |
|
Spring Boot 3.3.x |
June 2025 |
June 2028 |
|
Spring Boot 3.4.x |
December 2025 |
June 2028 |
|
Spring Boot 3.5.x |
June 2026 |
June 2028 |
|
Spring Framework 5.3.x |
August 2024 |
October 2027 |
|
Spring Security 5.7.x |
November 2024 |
November 2028 |
|
Spring Security 5.8.x |
November 2024 |
November 2028 |
|
Spring Framework 6.0.x |
June 2024 |
June 2028 |
|
Spring Framework 6.1.x |
June 2025 |
June 2028 |
|
Spring Framework 6.2.x |
June 2026 |
June 2028 |
|
Spring Security 6.2.x |
November 2024 |
November 2028 |
|
Spring Security 6.3.x |
June 2025 |
June 2029 |
|
Spring Security 6.4.x |
November 2025 |
November 2029 |
|
Spring Security 6.5.x |
June 2026 |
June 2030 |
After these dates, no new patches or updates are released by the community.
Risks of using unsupported versions
If you continue using unsupported Spring versions, your applications may be exposed to:
-
Unpatched vulnerabilities (CVEs) in Spring Core, WebMVC, and Boot autoconfiguration
-
Compatibility issues with newer Java JDKs or libraries
-
Compliance risks with standards like CIS, PCI-DSS, and ISO 27001
Without upstream support, your security posture and operational stability degrade over time.