Spring Client for AMQP 1.0
82%
Total Score
healthy
Healthy, with prerelease and workflow-hygiene caveats.
The repository name does not match this package and its README does not mention it, which can indicate a mismatched source; however, the repository tree visibly contains the spring-amqp-client module, partly compensating for that concern.
This is a prerelease milestone, and 75% of recent releases are prereleases, so API and behavior changes are more likely than for a final release.
The audit found 16 of 25 action references unpinned and repeated high-confidence template-injection findings, creating workflow hygiene concerns. No untrusted checkout, script injection, or dangerous trigger was reported, so this is not a severe health risk on its own.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-70300 spring-amqp-client is vulnerable to Denial of Service (DoS) in versions 4.1.0 - 4.1.0. | 4.1.0 - 4.1.0 | Medium |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
org.springframework.amqp:spring-amqp Version 4.2.0-M2 | — | — |
org.apache.qpid:protonj2-client Version 1.3.0 | — | — |
org.springframework:spring-context Version 7.1.0-M2 | — | — |
org.springframework:spring-messaging Version 7.1.0-M2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.