Spring Framework Sees Surge in Security Patches: 91 Flaws Fixed This Year

The Spring Application Framework, a popular tool used by developers to build software applications, has seen a significant increase in reported security vulnerabilities. According to recent figures, 91 flaws have been patched in Spring so far this year, bringing the total number of vulnerabilities fixed across related components to more than 200 in 2025. This is a dramatic rise compared to only 16 vulnerabilities patched in 2025 and 22 in 2024.

While Spring itself is a developer tool rather than something most small businesses interact with directly, many web applications, customer portals, and business software systems are built using it. If your business relies on custom-built software, an e-commerce platform, or a vendor-supplied application, there's a chance Spring components are working behind the scenes. Unpatched vulnerabilities in frameworks like this can be exploited by attackers to gain unauthorised access to systems or data.

The sharp increase in patched vulnerabilities highlights the growing complexity of modern software and the importance of keeping all underlying components up to date, not just the visible applications your staff use daily. Businesses that use custom or vendor-developed software should confirm with their developers or IT providers that patching processes cover these deeper technical layers.