Spring Boot 2.x — End of Life
EOLSpring Boot 2.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status |
|---|---|---|---|---|---|
| 2.7 | May 31, 2022 | — | Jun 30, 2023 | 2.7.18 | EOL |
| 2.6 | Nov 17, 2021 | — | Nov 24, 2022 | 2.6.15 | EOL |
| 2.5 | May 20, 2021 | — | May 19, 2022 | 2.5.15 | EOL |
| 2.4 | Nov 12, 2020 | — | Nov 18, 2021 | 2.4.13 | EOL |
| 2.3 | May 15, 2020 | — | May 20, 2021 | 2.3.12 | EOL |
| 2.2 | Oct 16, 2019 | — | Oct 16, 2020 | 2.2.13 | EOL |
| 2.1 | Oct 30, 2018 | — | Oct 30, 2019 | 2.1.18 | EOL |
| 2.0 | Mar 1, 2018 | — | Mar 1, 2019 | 2.0.9 | EOL |
CVEs affecting Spring Boot 2.x (0)
Spring Boot 2.x is EOL — migrate to Spring Boot 3.x
Spring Boot 3.x is the next major release. Plan your upgrade before Spring Boot 2.x stops receiving security patches.
Frequently asked questions
Is Spring Boot 2 end of life?
Yes. All Spring Boot 2.x releases have reached end of life and no longer receive security patches. Migrate to Spring Boot 3.x as soon as possible.
What CVEs affect Spring Boot 2?
No CVEs are currently tracked for Spring Boot 2.x in our database. This may mean no vulnerabilities have been recorded yet, or the data is still syncing.
What is the latest Spring Boot 2 version?
The latest Spring Boot 2.x patch release is 2.7.18, released on November 23, 2023. Always run the latest patch to benefit from all security fixes.
How to migrate from Spring Boot 2 to Spring Boot 3?
To migrate from Spring Boot 2 to Spring Boot 3: (1) review the official Spring Boot 3 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.
Is it safe to run Spring Boot 2 in production?
No. Spring Boot 2 has reached end of life and security vulnerabilities are no longer patched. Upgrade to a supported version immediately.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA