What’s New in Spring Boot 2.3.4, 2.2.10, and 2.1.17? Detailed Release Highlights

Spring Boot multiple versions have been released and are now available from repo.spring.io and Maven Central.

The releases are bug‑fix only, aiming to quickly address a security vulnerability (CVE‑2020‑5421) in the Spring Framework that could bypass RFD protection via sessionId.

Spring Boot 2.3.4

<parent>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-parent</artifactId>
    <version>2.3.4.RELEASE</version>
    <relativePath/>
</parent>

This version includes 61 bug fixes, enhancements, documentation improvements and dependency upgrades.

Release page: https://github.com/spring-projects/spring-boot/releases/tag/v2.3.4.RELEASE

Spring Boot 2.2.10

<parent>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-parent</artifactId>
    <version>2.2.10.RELEASE</version>
    <relativePath/>
</parent>

This version includes 72 bug fixes, documentation improvements and dependency upgrades.

Release page: https://github.com/spring-projects/spring-boot/releases/tag/v2.2.10.RELEASE

Spring Boot 2.1.17

<parent>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-parent</artifactId>
    <version>2.1.17.RELEASE</version>
    <relativePath/>
</parent>

This version includes 22 bug fixes, documentation improvements and dependency upgrades.

Release page: https://github.com/spring-projects/spring-boot/releases/tag/v2.1.17.RELEASE