New Broadcom Enhancements to TrueSource Spring Enterprise with Hub and App Advisor Help Customers Assess their Open Source Security Posture, Prioritize Fixes, and Automate Patching
Key Highlights
- ➤Broadcom shipped fixes for 89 novel TrueSource Spring Enterprise vulnerabilities to eligible customers
- ➤TrueSource vulnerability fixes reached 408 across Broadcom’s offerings
- ➤TrueSource Spring Enterprise adds Hub, Application Advisor plugins, and JFrog remediation integration
- ➤Broadcom engineers fixed 406 new vulnerabilities and delivered over 1,090 fixes in 2026
- ➤TrueSource Spring Enterprise is generally available with 87 fixes accessible immediately to eligible customers
Expert Statements
Purnima Padmanabhan, General manager, Tanzu Division, Broadcom
“Security isn’t a one-time initiative; it’s an ongoing commitment. In June, we pledged to identify and resolve Spring vulnerabilities faster than ever, and today’s release demonstrates our continued momentum”
Purnima Padmanabhan, General manager, Tanzu Division, Broadcom
“Our customers receive critical fixes early in a deployable format, with complete visibility into where patches belong and confirmation when they land. Crucially, fixes are contributed back to the open source community—because open source remains resilient only when businesses actively invest in ecosystem health.”
PALO ALTO, Calif., Oct. 27, 2026 (GLOBE NEWSWIRE) -- Broadcom Inc. (NASDAQ: AVGO), a global technology leader that designs, develops, and supplies semiconductor and infrastructure software solutions, today shipped fixes for 89 novel vulnerabilities in TrueSource Spring Enterprise to its critical infrastructure customers and others who qualify for early access, ahead of public disclosure. This brings the total number of vulnerabilities fixed across TrueSource offerings to 408.
Patches only secure an environment once deployed. To close that gap, Spring Enterprise adds TrueSource Hub to help enterprises assess application exposure, prioritize critical fixes, and track status. Additionally, build plugins for Application Advisor automate patching within existing Maven or Gradle workflows, generating update pull requests to streamline merging approved fixes.
Get started
Create a free account to read the full story.