Skip to main content

Press release · October 27, 2026 · globenewswire.com

Broadcom Inc. ships 89 TrueSource Spring Enterprise vulnerability fixes

Summary

Broadcom Inc. has shipped fixes for 89 newly identified vulnerabilities in TrueSource Spring Enterprise, ahead of public disclosure. The fixes reached customers with early access, and they bring the total number of vulnerabilities fixed across TrueSource offerings to 408.

Patches secure an environment only once they are deployed, which leaves a gap between release and installation. TrueSource Spring Enterprise now includes TrueSource Hub, intended to help organizations assess application exposure, prioritize critical fixes, and track status.

TrueSource Hub connects to an organization’s code repositories and displays the security status of open source components used by each application, including Java, Python, and JavaScript libraries, container images, and data services. It tracks patch status in a live view. Build plugins for Application Advisor fit into existing Maven and Gradle workflows and generate pull requests that carry approved fixes into merging.

Broadcom engineers fixed 406 new vulnerabilities in 2026, delivered more than 1,090 fixes including 798 backports, reviewed over 2,600 reports, and filtered out more than 3,000 false alarms. Each fix is delivered simultaneously across all supported versions, and current versions receive security-only patches. TrueSource Spring Enterprise, including Hub and build plugins, is generally available, and fixes are accessible immediately to early-access customers.

“Security isn’t a one-time initiative; it’s an ongoing commitment. In June, we pledged to identify and resolve Spring vulnerabilities faster than ever, and today’s release demonstrates our continued momentum,” said Purnima Padmanabhan, general manager, Tanzu Division, Broadcom.

“Our customers receive critical fixes early in a deployable format, with complete visibility into where patches belong and confirmation when they land. Crucially, fixes are contributed back to the open source community—because open source remains resilient only when businesses actively invest in ecosystem health.” Padmanabhan said. Detailed vulnerability information will be published once fixes reach the community and CVEs are issued.

Our summary. The original keeps its own byline.

Read the original on globenewswire.com

Companies in this article

Topics

Mentions

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "legalName": "Wiretap Labs, LLC",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/broadcom-inc.-ships-89-truesource-spring-enterprise-vulnerability-fixes/",
        "name": "Broadcom Inc. ships 89 TrueSource Spring Enterprise vulnerability fixes",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/broadcom-inc.-ships-89-truesource-spring-enterprise-vulnerability-fixes/#blogposting",
    "@type": "NewsArticle",
    "about": {
      "@id": "https://decisioninsights.ai/registry/broadcom/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/broadcom/",
      "name": "Broadcom"
    },
    "articleSection": [
      "Cybersecurity"
    ],
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Seniority",
        "audienceType": "Director"
      },
      {
        "@type": "Audience",
        "additionalType": "Job function",
        "audienceType": "Cybersecurity / Security Architect"
      },
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Architect"
      },
      {
        "@type": "Audience",
        "additionalType": "Buyer role",
        "audienceType": "Decision Maker / Budget Holder"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Majority"
      },
      {
        "@type": "Audience",
        "additionalType": "Technology maturity",
        "audienceType": "Operational Expansion"
      },
      {
        "@type": "Audience",
        "additionalType": "Industry",
        "audienceType": "Information Technology / Cybersecurity / Application, Cloud & AI Security / Application Security & DevSecOps (SAST/DAST/SCA/Supply Chain)"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-signals/#person",
      "@type": "Person",
      "name": "Decision Insights Record",
      "url": "https://decisioninsights.ai/author/decision-insights-signals/"
    },
    "dateModified": "2026-10-27T07:54:16-06:00",
    "datePublished": "2026-10-27T07:54:08-06:00",
    "description": "Broadcom Inc. ships fixes for 89 vulnerabilities in TrueSource Spring Enterprise, adds TrueSource Hub and build plugins for open source security patching.",
    "headline": "Broadcom Inc. ships 89 TrueSource Spring Enterprise vulnerability fixes",
    "isBasedOn": {
      "@type": "CreativeWork",
      "sourceOrganization": {
        "@type": "Organization",
        "name": "GlobeNewswire"
      },
      "url": "https://www.globenewswire.com/news-release/2026/10/27/3389095/19933/en/new-broadcom-enhancements-to-truesource-spring-enterprise-with-hub-and-app-advisor-help-customers-assess-their-open-source-security-posture-prioritize-fixes-and-automate-patching.html"
    },
    "keywords": [
      "Application",
      "Enterprise",
      "Open Source",
      "Vulnerabilities"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/broadcom-inc.-ships-89-truesource-spring-enterprise-vulnerability-fixes/",
      "@type": "WebPage",
      "sdDatePublished": "2026-10-27",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/broadcom/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/broadcom/",
        "name": "Broadcom"
      },
      {
        "@id": "https://decisioninsights.ai/registry/services/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/services/",
        "name": "services"
      },
      {
        "@id": "https://decisioninsights.ai/projects/python/#project",
        "@type": "SoftwareSourceCode",
        "mainEntityOfPage": "https://decisioninsights.ai/projects/python/",
        "name": "Python"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-signals/#person",
    "@type": "Person",
    "description": "Press releases and independent analyst research, structured into concise summaries for research and monitoring. Produced under our Standards & Methodology.",
    "name": "Decision Insights Record",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-signals/"
  }
]

Is this your company? Get structured data for your own pages