Spring Boot EOL Support Doesn't Cover What You Think It Does
When Spring Boot goes end of life, most teams assume their LTS coverage has them protected. It doesn't — at least not the way they think. The real risk isn't in the Spring Boot or Spring Framework version on the label. It's in the 40+ libraries the Bill of Materials has quietly pinned underneath it, frozen at EOL while CVE research keeps moving.