← All frameworks
65
Spring Boot
modern
java · backend · since 2014
acceptable
↓
3.0 pts
vs last month
Updated June 2026
Spring Boot scores 66/100. Verdict: Acceptable.
Dimension breakdown
Security
250 total CVEs on record. 25 critical severity. 3 actively exploited (CISA KEV).
Total Cves
250
Critical Cves
25
Exploited Cves
3
Avg Cvss
6.0
Cves Last Year
30
Performance
Average performance. Room for optimization.
Ecosystem
76,000 GitHub stars. 1,000 contributors. 15 releases in the last year.
Stars
76,000
Contributors
1000
Releases Last Year
15
Avg Issue Close Days
8
Ai Readiness
Good AI-readiness. Supports structured data output and API patterns. Suitable for the AI-first web with some configuration.
Structured Output
80
Api First
1.0
Headless Capable
1.0
Developer Experience
Strong developer experience. Good docs, modern tooling, active community.
Market Trajectory
Score
65
Market Share Pct
2.0
Cost Of Ownership
Moderate cost. Requires traditional server infrastructure.
Actively exploited vulnerabilities
Updated 2026-07-13
5 entries
5 confirmed vulnerabilities being actively exploited in real attacks right now. Source: CISA Known Exploited Vulnerabilities.
Latest entry: 2022-08-25
Spring Boot scores 66/100 overall. Strongest dimension: ai readiness (80). Weakest: security (55).
Latest Spring Boot insights
Spring's 6.82 Average CVSS: Enterprise Java's Severity Problem
June 24, 2026 · 6 min
The Spring Security Paradox: Fewer CVEs, Higher Severity
June 22, 2026 · 5 min
Spring's 42 Security Score: What Migration Looks Like for a Java Monolith
June 22, 2026 · 6 min
Spring Lost 13.6 Security Points in 60 Days. Enterprise Java's Foundation Is Cracking.
June 20, 2026 · 6 min
Record-Breaking June 2026 Patch Tuesday: The Maintenance Burden That Never Ends
June 18, 2026 · 4 min