Security Policy

JAR signing

Spring Framework JARs released on Maven Central are signed. You'll find more information about the key here: https://spring.io/GPG-KEY-spring.txt

Supported Versions

Please see the Spring Framework Versions wiki page.

Reporting a Vulnerability

Please see https://spring.io/security-policy.