end-of-life.org

Spring Boot 4.0 End of Life

Support dates, the patch stream you lose at EOL, and upgrade guidance — rebuilt from live data.

Supported

Spring Boot 4.0 is actively supported. It reaches end of life on 31 Dec 2026.

144 days of security support left
4.0.7 latest release
64% of this branch's supported lifetime has elapsed — 30 Nov 2025 → 31 Dec 2026.

Support timeline

Official dates from the Spring Boot release process.

MilestoneDateStatus
Initial release30 Nov 2025
End of life (scheduled)31 Dec 2026 in 144 days
Extended support ends31 Dec 2027 509 days left
Latest release4.0.7 · 10 Jun 2026 current

What you lose on 31 Dec 2026

Being supported means fixes keep shipping to this branch. Here is the stream that stops. Source: NVD.

Spring Boot CVEs published and patched, by year

10 published in the last 12 months · data refreshed 2026-08-09

0 5 10 1 2022 5 2023 0 2024 0 2025 10 2026

At the last-12-month rate of 10 Spring Boot CVEs, running 4.0 for a year past 31 Dec 2026 means roughly that many vulnerabilities fixed upstream but never backported to your branch. Past branches bear this out: Spring Boot 3.5 has missed 0 since it went end of life.

How much runway a newer branch buys

Moving to Spring Boot 4.1 extends security support by about 212 days.

BranchEnd of lifeDays leftvs 4.0
Spring Boot 4.1 31 Jul 2027 356 +212 days
Spring Boot 4.0 31 Dec 2026 144 this branch

Frequently asked questions

When does Spring Boot 4.0 reach end of life?

Spring Boot 4.0 reaches end of life on 31 Dec 2026 — 144 days from now. After that date it receives no security fixes.

Is Spring Boot 4.0 still supported?

Yes. Spring Boot 4.0 is currently maintained. Latest release: 4.0.7, published 10 Jun 2026.

What happens when Spring Boot 4.0 reaches end of life?

Security fixes stop. Over the last 12 months 10 Spring Boot vulnerabilities were published and patched across supported branches; once 4.0 is end of life, fixes at that rate no longer reach it.

How long do I have to upgrade from Spring Boot 4.0?

144 days. Moving to Spring Boot 4.1 instead buys roughly 212 more days of security support.

All Spring Boot versions