How Do I Fix CVE-2024-38828 in 5.3.x?

[huaweiodrenkai]

Currently, we are using JDK8, which cannot be directly upgraded to 6.X. Will CVE-2024-38828 be fixed in 5.3.X?

[sdeleuze]

Spring Framework 5.3.x is out of OSS support, but has enterprise support available via Tanzu Spring, see more information here.