Spring Security 7.x — End of Life
ActiveSpring Security 7.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status | Alert me |
|---|---|---|---|---|---|---|
| 7.1 | Jun 9, 2026 | — | Jul 31, 2027 | 7.1.0 | Active | |
| 7.0 | Nov 17, 2025 | — | Dec 31, 2026 | 7.0.6 | Active |
CVEs affecting Spring Security 7.x (0)
Frequently asked questions
Is Spring Security 7 end of life?
No. Spring Security 7.x is still supported until July 31, 2027. It continues to receive security patches and bug fixes.
What CVEs affect Spring Security 7?
No CVEs are currently tracked for Spring Security 7.x in our database. This may mean no vulnerabilities have been recorded yet, or the data is still syncing.
What is the latest Spring Security 7 version?
The latest Spring Security 7.x patch release is 7.1.0, released on June 9, 2026. Always run the latest patch to benefit from all security fixes.
When was Spring Security 7 first released?
Spring Security 7.0 was initially released on June 9, 2026. See the full version timeline in the table above.
Is it safe to run Spring Security 7 in production?
Spring Security 7 is still supported and safe for production use until July 31, 2027. Ensure you are running the latest patch version (7.1.0) to have all security fixes applied.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA