spring security end of life dates — full support timeline
16 of 18 tracked spring security releases have already reached end of life. The dates below are published support dates, not estimates.
Version support timeline
| Release | Released | End of life | Latest | Status |
|---|---|---|---|---|
| 7.1 | 2026-06-09 | 2027-07-31 | 7.1.0 | supported |
| 7.0 | 2025-11-17 | 2026-12-31 | 7.0.6 | ends soon |
| 6.5 | 2025-05-19 | 2026-06-30 | 6.5.11 | ended |
| 6.4 | 2024-11-18 | 2025-12-31 | 6.4.13 | ended |
| 6.3 | 2024-05-20 | 2025-06-30 | 6.3.10 | ended |
| 6.2 | 2023-11-20 | 2024-12-31 | 6.2.8 | ended |
| 6.1 | 2023-05-15 | 2024-06-30 | 6.1.9 | ended |
| 6.0 | 2022-11-21 | 2023-12-31 | 6.0.8 | ended |
| 5.8 | 2022-11-21 | 2023-12-31 | 5.8.16 | ended |
| 5.7 | 2022-05-16 | 2023-06-30 | 5.7.14 | ended |
| 5.6 | 2021-11-16 | 2022-11-30 | 5.6.12 | ended |
| 5.5 | 2021-05-18 | 2022-05-31 | 5.5.8 | ended |
| 5.4 | 2020-09-09 | 2021-11-30 | 5.4.10 | ended |
| 5.3 | 2020-03-04 | 2021-05-31 | 5.3.13 | ended |
| 5.2 | 2019-10-01 | 2020-10-31 | 5.2.15 | ended |
| 5.1 | 2018-10-31 | 2019-10-31 | 5.1.13 | ended |
| 5.0 | 2018-03-31 | 2019-03-31 | 5.0.19 | ended |
| 4.2 | 2017-01-31 | 2019-08-31 | 4.2.20 | ended |
Who is affected
Anyone running an unsupported spring security release. After end of life a version stops receiving security patches, which typically becomes an audit or compliance finding before it becomes an outage. Upgrading to a supported release is the migration path; the table above shows which releases still qualify.
Source
These dates are maintained by endoflife.date/spring-security, an open community dataset that cites vendor announcements. Verify against the vendor before making a compliance decision.
Get told before the next spring security deadline
You are reading this because a spring security release is losing support. The next one will arrive the same way — quietly, months before an auditor finds it. A free weekly email lists every spring security and related deadline as it is announced, with exact dates and primary sources.
Watch spring security deadlines Team monitoring pilot →
Takes about twenty seconds. No account, no card, no tracking.