Java Language & PlatformLunch Talk40min
Keeping Spring Applications Secure in the Age of AI
AI-assisted research is rapidly uncovering Spring vulnerabilities, increasing upgrade pressure. This session explains how Spring teams can respond using Long Term Support releases, Spring Application Advisor for automated CI patching and upgrades, and direct support from the Spring team through VMware Tanzu Spring.
talk.summaryAiDisclaimer
Neven CvetkovicVMware Tanzu
talkDetail.whenAndWhere
Thursday, October 8, 12:55-13:35
Room 7
talks.roomOccupancytalks.noOccupancyInfo
Spring is the most widely used Java framework in the world, and millions of applications depend on it. Keeping
them up to date used to be a matter of discipline. That has changed. In August 2026 alone, 96 security
vulnerabilities were published in the Spring ecosystem, driven by AI-assisted research. Models such as
Anthropic's Mythos find weaknesses that survived years of manual review, and attackers can use the same
capability.
In this session, we look at what this means for teams running Spring in production and how to respond. We
show how Long Term Support releases for Spring ease the pressure of constant upgrades, how Spring
Application Advisor automates patching and upgrades inside your CI pipeline, and how direct access to the
Spring team helps when automation is not enough. All of this is part of VMware Tanzu Spring, delivered by the
vendor of Spring itself. Customers like SAP rely on exactly this combination to keep their most complex
applications secure and current.
them up to date used to be a matter of discipline. That has changed. In August 2026 alone, 96 security
vulnerabilities were published in the Spring ecosystem, driven by AI-assisted research. Models such as
Anthropic's Mythos find weaknesses that survived years of manual review, and attackers can use the same
capability.
In this session, we look at what this means for teams running Spring in production and how to respond. We
show how Long Term Support releases for Spring ease the pressure of constant upgrades, how Spring
Application Advisor automates patching and upgrades inside your CI pipeline, and how direct access to the
Spring team helps when automation is not enough. All of this is part of VMware Tanzu Spring, delivered by the
vendor of Spring itself. Customers like SAP rely on exactly this combination to keep their most complex
applications secure and current.
Neven Cvetkovic
Neven Cvetkovic is a seasoned veteran of the Java ecosystem with over 20 years of experience tackling complex enterprise Dev, Sec, and Ops challenges. At VMware Tanzu, he guides Fortune 2000 organizations through their cloud-native journeys and helps them build, deploy, and scale enterprise AI workloads. Neven is passionate about AI engineering and regularly shares his hard-earned knowledge to help development teams modernize application architectures effectively.