Broadcom Ships 89 Novel Vulnerability Fixes for TrueSource Spring Enterprise, Adds Hub and Application Advisor
Broadcom (Nasdaq: AVGO) announced on October 27 that it has shipped fixes for 89 novel vulnerabilities in its TrueSource Spring Enterprise platform, delivered first to critical infrastructure customers and early access customers, and launched two new tools, TrueSource Hub and Application Advisor, to help enterprises assess application exposure and automate patch updates. (GSM, based on a Broadcom press release)
According to Broadcom, TrueSource Hub helps customers assess their application exposure, prioritize critical fixes and track remediation status, while Application Advisor, available as Maven and Gradle build plugins, automates patching inside developers' existing workflows and generates update pull requests. The company said its Frontier SI scanning lets it find and fix risk before it is disclosed in public open source, and that fixes are released across all supported versions simultaneously.
TrueSource is Broadcom's enterprise support program for the Spring open source ecosystem, growing out of the company's expanded investment in the Spring project announced in June, and covers SKUs across Spring Boot, Spring Cloud, Spring Data, Spring Security and more. Broadcom said its engineers have fixed 406 novel vulnerabilities in 2026, delivered over 1,090 fixes including 798 backports, reviewed more than 2,600 reports and filtered more than 3,000 false alarms; in June, a Spring remote code execution vulnerability, CVE-2026-41855 with a CVSS score of 8.1, was fixed simultaneously across four supported release lines through TrueSource.
Source: GSM · USA (original Chinese edition)
Photo: 图：博通生产的网络芯片特写（资料图）。照片：CC BY-SA 4.0，经 Wikimedia Commons。Photo: Close-up of a Broadcom network chip (file photo). CC BY-SA 4.0, via Wikimedia Commons.
