Spring Boot End of Life Dates

other

Developers rely on Spring Boot to simplify the process of building and deploying applications, and for good reason - it was first introduced in 2009 as a way to streamline the development process for Java-based applications, and is now maintained by VMware. Since its inception, Spring Boot has become a staple in the development community, with many using it to build a wide range of applications, from simple web services to complex enterprise systems. The ability to track end-of-life dates, supported versions, and security patch timelines is crucial for developers who want to ensure their applications remain secure and up-to-date.

The end-of-life landscape for Spring Boot is complex, with a total of 17 versions having been released over the years. Of these, 14 versions are no longer supported, while 3 remain active. The latest stable version, 3.5.15, is the current standard, but developers should be aware that version 3.5 is set to reach its end-of-life on 2026-06-30. This means that any applications still using version 3.5 will need to be upgraded to a newer version in order to continue receiving support and security patches. The last version to reach its end-of-life was 3.4, which ceased to be supported on 2025-12-31.

Fortunately, the security picture for Spring Boot is relatively clean, with no known CVEs currently tracked. This means that there are no critical vulnerabilities that developers need to be concerned about, and no versions are considered to be high-risk. As a result, developers can focus on planning their upgrades and migrations without the added pressure of addressing potential security issues. To ensure the continued security and stability of their applications, developers should prioritize upgrading to the latest supported version of Spring Boot, and stay informed about any future end-of-life dates or security patches that may be released.

Last updated: Oct 23, 2026

VersionReleasedActive supportEOL dateUntil EOLLatestCVEsStatusAlert me
4.1 Jun 30, 2026—Jul 31, 2027in 281d4.1.2—Active
4.0 Nov 30, 2025—Dec 31, 2026in 69d4.0.9—EOL soon
3.5 May 31, 2025—Jun 30, 2026115d ago3.5.16—EOL
3.4 Nov 30, 2024—Dec 31, 2025296d ago3.4.13—EOL
3.3 May 31, 2024—Jun 30, 2025480d ago3.3.13—EOL
3.2 Nov 30, 2023—Dec 31, 2024661d ago3.2.12—EOL
3.1 May 31, 2023—Jun 30, 2024845d ago3.1.12—EOL
3.0 Nov 24, 2022—Dec 31, 20231027d ago3.0.13—EOL
2.7 May 31, 2022—Jun 30, 20231211d ago2.7.18—EOL
2.6 Nov 17, 2021—Nov 24, 20221429d ago2.6.15—EOL
2.5 May 20, 2021—May 19, 20221618d ago2.5.15—EOL
2.4 Nov 12, 2020—Nov 18, 20211800d ago2.4.13—EOL
2.3 May 15, 2020—May 20, 20211982d ago2.3.12—EOL
2.2 Oct 16, 2019—Oct 16, 20202198d ago2.2.13—EOL
2.1 Oct 30, 2018—Oct 30, 20192550d ago2.1.18—EOL
2.0 Mar 1, 2018—Mar 1, 20192793d ago2.0.9—EOL
1.5 Jan 30, 2017—Aug 6, 20192635d ago1.5.22—EOL

Data sourced from endoflife.date · CVE data from NVD

Related technologies

Frequently Asked Questions