Spring Boot 3.x — End of Life

EOL
EOL: Jun 30, 20266 releases in this series0 CVEs

Spring Boot 3.x — All releases

VersionReleasedActive supportEOL dateLatest patchStatusAlert me
3.5May 31, 2025Jun 30, 20263.5.16EOL
3.4Nov 30, 2024Dec 31, 20253.4.13EOL
3.3May 31, 2024Jun 30, 20253.3.13EOL
3.2Nov 30, 2023Dec 31, 20243.2.12EOL
3.1May 31, 2023Jun 30, 20243.1.12EOL
3.0Nov 24, 2022Dec 31, 20233.0.13EOL

CVEs affecting Spring Boot 3.x (0)

No CVEs tracked for Spring Boot 3.x.

Spring Boot 3.x is EOL — migrate to Spring Boot 4.x

Spring Boot 4.x is the next major release. Plan your upgrade before Spring Boot 3.x stops receiving security patches.

See Spring Boot 4.x

Frequently asked questions

Is Spring Boot 3 end of life?

Yes. All Spring Boot 3.x releases have reached end of life and no longer receive security patches. Migrate to Spring Boot 4.x as soon as possible.

What CVEs affect Spring Boot 3?

No CVEs are currently tracked for Spring Boot 3.x in our database. This may mean no vulnerabilities have been recorded yet, or the data is still syncing.

What is the latest Spring Boot 3 version?

The latest Spring Boot 3.x patch release is 3.5.16, released on June 25, 2026. Always run the latest patch to benefit from all security fixes.

How to migrate from Spring Boot 3 to Spring Boot 4?

To migrate from Spring Boot 3 to Spring Boot 4: (1) review the official Spring Boot 4 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.

Is it safe to run Spring Boot 3 in production?

No. Spring Boot 3 has reached end of life and security vulnerabilities are no longer patched. Upgrade to a supported version immediately.

Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA