Spring LDAP 2026.06 Releases - Contains CVE Fix

Spring LDAP releases new versions that address a critical authentication bypass vulnerability.

• •Releases Spring LDAP 3.3.8, 4.0.4, and 4.1.0 to fix CVE-2026-41720 "Authentication Bypass with Empty Password in Spring LDAP"
• •Open source support for Spring LDAP 2.4.x and 3.2.x has ended
• •Commercial versions available: 2.4.5, 3.2.18, 3.3.7.1, and 4.0.3.1 for enterprise customers
• •Compatible with Spring Boot 2.7.34, 3.3.20, 3.4.17 and hot fixes 3.5.14.1, 4.0.6.1

This summary was automatically generated by AI based on the original article and may not be fully accurate.