Package Health/de.codecentric:spring-boot-admin-server

spring-boot-admin-server

Spring Boot Admin Server

Latest 4.1.3de.codecentric

Maven

82%

Total Score

healthy

Healthy: active releases and maintenance outweigh workflow hygiene gaps.

Are you affected? Scan for Free

Health Score Breakdown

Repo package mention

The repository name does not match this Maven module and its README does not mention the package, which creates some package-to-source traceability uncertainty; the repository's multi-module structure partly explains the mismatch.

Security policy

No repository security policy was found, leaving vulnerability-reporting guidance less transparent for adopters.

Workflow audit

All 30 analyzed action references are unpinned, and high-confidence template-injection and unpinned-image findings remain; no dangerous trigger or untrusted checkout was observed, so this is a hygiene concern rather than a severe release risk.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-778801 spring-boot-admin-server is vulnerable to Server-Side Request Forgery (SSRF) in versions 0.0.1 - 4.1.1.	0.0.1 - 4.1.1	High
AIKIDO-2026-10097 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. spring-boot-admin-server is vulnerable to Remote Code Execution (RCE) in versions 0.0.1 - 3.5.6.	0.0.1 - 3.5.6	High
CVE-2023-38286 de.codecentric:spring-boot-admin-server is vulnerable to Improper Neutralization of Special Elements used in a Command ('Command Injection') in versions 3.0.0 - 3.1.2 and 0.0.0 - 2.7.16.	0.0.0 - 2.7.163.0.0 - 3.1.2	High

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
org.springframework.boot:spring-boot-starter Version 4.1.1	—	—
org.springframework.boot:spring-boot-starter-webclient Version 4.1.1	—	—
org.springframework.boot:spring-boot-starter-hazelcast Version 4.1.1	—	—
org.springframework.boot:spring-boot-starter-webflux Version 4.1.1	—	—
org.springframework.boot:spring-boot-starter-webmvc Version 4.1.1	—	—