The Spring Framework, the stalwart open source Java development platform facing an Oracle-led challenge to its relevance, is getting its first major upgrade since 2009 on Thursday.

A new zero-day vulnerability in the Spring Core Java framework called 'Spring4Shell' has been publicly disclosed, allowing unauthenticated remote code execution on applications.

Traditionally, Spring has emphasized the use of XML meta data to externalize configuration data from Java code. But in version 2.1, annotations, which are source-level metadata, can be used.

Johnson wrote the first version of the Spring framework, which is a layered Java/J2EE framework based on code published in his book Expert One-on-One Java EE Design and Development (Wrox Press, ...

Johnson wrote the first version of the Spring framework, which is a layered Java/J2EE framework based on code published in his book Expert One-on-One Java EE Design and Development (Wrox Press, ...