Level up your Java code and explore what Spring can do for you.

The Spring Core component used in Java applications had a weakness that could allow an attacker to execute code on the server.

The Spring Cloud Config Server libraries from Spring Framework, VMware, and Root are affected by a security weakness that could let an attacker execute.

If your application uses Spring Cloud Gateway Server Webflux, Spring Boot actuator, and exposes actuator endpoints without security, an attacker could.

The Spring Web library used in Java applications (including versions supplied by Spring Framework, VMware, Root, and Debian) has a weakness that could let.

Several Spring Boot packages that you may use in Maven have a weakness that could let an attacker cause the application to execute unwanted code.

The Spring Security Core library used in several applications can be tricked into bypassing security checks, potentially letting unauthorized users access.

Promises ‘secure artifacts’ for Spring and RabbitMQ, and other projects that matter to its Tanzu suite

If your application uses Spring's SimpleEvaluationContext to process SpEL expressions and the expression compiler is turned on, an attacker could bypass.

If your application uses Spring's WebFlux with functional endpoints and the DispatcherServlet, an attacker could bypass header checks during a CORS.

Silent patches do not truly hide vulnerabilities because attackers can still diff binaries and uncover what changed, while defenders are left without the context they need to prioritize response. The article argues that Broadcom’s private Spring Enterprise Repository may give paying customers early exploit intelligence for Spring Framework issues, creating a...

I'm working on a benchmark tool comparing multiple backend stacks to see how they compare given a fixed amount of resource (CPU/ram) and on the other side how low can they go on resources based on a predefined work load (1000 req/sec for example). And then I approximate the cost of running each stack on different cloud providers in a auto-generated report. #rust #rocket #java #kotlin #springframework #js #nodejs #bunhttps://github.com/jeantuffier/slashbench

Podcast Episode · Pro Coder Show · September 17, 2022 · 18m

Para você que usa o Redis como estratégia de Publish/Subscribe(Pub/Sub), com o lançamento do Spring Boot 4.1 essa funcionalidade foi…

Recentemente foi lançada a nova versão do Spring Boot 4.1.0 e com ela vem diversas melhorias, métodos depreciados que foram removidos e…

What if upgrading a legacy Java app from Java 8 to Java 25 took 20 minutes instead of weeks? In this episode, watch as GitHub Copilot's app modernization extension automatically generates an upgrade plan, applies changes in milestones using OpenRewrite, runs tests, validates CVEs, and checks for behavior changes — all while you supervise. In this episode, you'll learn: → How to use the GitHub Copilot app modernization extension in IntelliJ to upgrade Java runtime and frameworks → How the tool breaks major version jumps into safe, incremental milestones (Java 8 → 21 → 25, Spring Boot 1.5 → 3.3 → 3.4 → 3.5) → How AI agents use proven open-source tools like OpenRewrite under the hood → How automatic CVE scanning and behavior validation catch issues after every change → How the agent iterates on test failures — fixing Mockito compatibility changes, dependency issues, and more → What happens when a target version isn't fully supported yet (and how the tool explains why) 📺 This is Episode 2 of the Modernize Java Apps with AI series — a 9-part, hands-on guide to upgrading legacy Java applications using GitHub Copilot. 🔗 Series playlist: https://www.youtube.com/playlist?list=PLlrxD0HtieHhaBJWlcxGd-kTDikSD4xyD 🔗 GitHub Copilot Modernization extension: https://aka.ms/GHCPMod-Java 👤 Presented by Sandra Ahlgrimm, Java & AI Advocate, Microsoft Java #GitHubCopilot #JavaUpgrade #SpringBoot #JakartaEE #OpenRewrite #CVE #JavaModernization #AI #LegacyCode

Level up your Java code and explore what Spring can do for you.

Level up your Java code and explore what Spring can do for you.

Level up your Java code and explore what Spring can do for you.

Level up your Java code and explore what Spring can do for you.

https://youtu.be/oeR4Ps-m3SE