spring-security 7.1.1
spring-security 7.1.1
:star: New Features
- Fix Broken
DefaultLoginPageGeneratingFilterJavadoc Link #19252 - Remove BeanResolver Null Checks #19209
- Remove Unnecessary
AuthorizationDecisionCast #19283 - Update One-Time Token Docs for Renamed APIs #19274
:beetle: Bug Fixes
- Correct validation logic in CasAuthenticationToken #19372
- Differentiate Forwarded and X-Forwarded headers in proxy docs #19477
- Find mixed-case names in InMemoryUserDetailsManager#changePassword #19539
- Fix
OAuth2PushedAuthorizationRequestUriparsing #19445 - Fixes cve-2026-41707
- Fixes cve-2026-47841
- Fixes cve-2026-47842
- Fixes cve-2026-47877
- Fixes cve-2026-59270
- Fixes cve-2026-59276
- Fixes cve-2026-59277
- Update JavaDoc Links in Reference #19199
- Validate Parameter in setPostAuthenticationChecks #19277
:hammer: Dependency Upgrades
- Bump
@springio/antora-extensions from 1.14.12 to 1.14.13 in /docs #19503 - Bump actions/checkout from 6.0.3 to 7.0.0 #19351
- Bump actions/checkout from 7.0.0 to 7.0.1 #19464
- Bump actions/setup-java from 5.2.0 to 5.3.0 #19352
- Bump actions/setup-java from 5.3.0 to 5.4.0 #19380
- Bump actions/setup-java from 5.4.0 to 5.5.0 #19430
- Bump actions/setup-java from 5.5.0 to 5.6.0 #19453
- Bump actions/setup-java from 5.6.0 to 5.7.0 #19501
- Bump antora from 3.2.0-alpha.12 to 3.2.0-rc.2 in /docs #19385
- Bump ch.qos.logback:logback-classic from 1.5.34 to 1.5.35 #19374
- Bump ch.qos.logback:logback-classic from 1.5.35 to 1.5.36 #19389
- Bump ch.qos.logback:logback-classic from 1.5.36 to 1.5.37 #19396
- Bump ch.qos.logback:logback-classic from 1.5.37 to 1.5.38 #19431
- Bump ch.qos.logback:logback-classic from 1.5.38 to 1.6.0 #19467
- Bump ch.qos.logback:logback-classic from 1.6.0 to 1.6.1 #19476
- Bump ch.qos.logback:logback-classic from 1.6.1 to 1.6.2 #19556
- Bump ch.qos.logback:logback-classic from 1.6.2 to 1.6.3 #19564
- Bump com.fasterxml.jackson:jackson-bom from 2.22.0 to 2.22.1 #19419
- Bump com.fasterxml.jackson:jackson-bom from 2.22.1 to 2.22.2 #19566
- Bump com.nimbusds:oauth2-oidc-sdk from 11.37.2 to 11.38.1 #19439
- Bump com.nimbusds:oauth2-oidc-sdk from 11.38.1 to 11.38.2 #19525
- Bump com.unboundid:unboundid-ldapsdk from 7.0.4 to 7.0.5 #19322
- Bump com.webauthn4j:webauthn4j-core from 0.31.6.RELEASE to 0.31.7.RELEASE #19313
- Bump com.webauthn4j:webauthn4j-core from 0.31.7.RELEASE to 0.31.8.RELEASE #19409
- Bump com.webauthn4j:webauthn4j-core from 0.31.8.RELEASE to 0.31.9.RELEASE #19496
- Bump gradle-wrapper from 9.5.1 to 9.6.0 #19360
- Bump gradle-wrapper from 9.6.0 to 9.6.1 #19393
- Bump gradle-wrapper from 9.6.1 to 9.7.0 #19516
- Bump io.spring.nullability:io.spring.nullability.gradle.plugin from 0.0.13 to 0.0.14 #19378
- Bump org-bouncycastle from 1.84 to 1.85 #19437
- Bump org-jetbrains-kotlin from 2.4.0 to 2.4.10 #19447
- Bump org-opensaml5 from 5.2.2 to 5.2.3 #19358
- Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.1 to 5.6.2 #19401
- Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.2 to 5.6.3 #19495
- Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.3 to 5.6.4 #19538
- Bump org.apache.kerby:kerb-simplekdc from 2.1.1 to 2.1.2 #19387
- Bump org.hibernate.orm:hibernate-core from 7.4.0.Final to 7.4.1.Final #19312
- Bump org.hibernate.orm:hibernate-core from 7.4.1.Final to 7.4.2.Final #19364
- Bump org.hibernate.orm:hibernate-core from 7.4.2.Final to 7.4.3.Final #19402
- Bump org.hibernate.orm:hibernate-core from 7.4.3.Final to 7.4.4.Final #19416
- Bump org.hibernate.orm:hibernate-core from 7.4.4.Final to 7.4.5.Final #19443
- Bump org.junit:junit-bom from 6.1.0 to 6.1.1 #19395
- Bump org.junit:junit-bom from 6.1.1 to 6.1.2 #19442
- Bump org.junit:junit-bom from 6.1.2 to 6.1.3 #19524
- Bump org.junit:junit-bom from 6.1.2 to 6.1.3 #19519
- Bump org.seleniumhq.selenium:htmlunit3-driver from 4.43.0 to 4.45.0 #19365
- Bump org.seleniumhq.selenium:selenium-java from 4.43.0 to 4.45.0 #19344
- Bump tools.jackson:jackson-bom from 3.2.0 to 3.2.1 #19438
- Bump tools.jackson:jackson-bom from 3.2.1 to 3.2.2 #19562
- Release 7.1.1 #19310
- Upgrade to Micrometer 1.17.1 #19489
- Upgrade to Reactor 2025.0.7 #19488
- Upgrade to Spring Framework 7.0.9 #19487
- Upgrade to Spring LDAP 4.1.1 #19491
Source spring-projects/spring-security ·
7.1.1· 2026-08-20 · upstream release
Mirrored verbatim for indexing. All rights belong to the upstream project.
Release notes are published by the upstream project and mirrored here for indexing. All rights belong to their authors.