Package Health

spring-cloud-commons

Spring Cloud Commons

Latest 5.1.0-M1org.springframework.cloudMavenMaven

87%

Total Score

healthy

Healthy: active maintenance and signed, licensed releases outweigh prerelease and workflow hygiene concerns.

Are you affected? Scan for Free

Health Score Breakdown

Version stabilitycaution

This is a prerelease (5.1.0-M1), so compatibility may change even though the recent prerelease share is limited and the major line is established.

Workflow auditcaution

All nine workflows were analyzed, references are fully pinned, and most workflows use read-only permissions. High-confidence template-injection findings remain a workflow hygiene concern, but no untrusted checkout or script-injection sink was reported.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-48519
spring-cloud-commons is vulnerable to Improper Access Control in versions 0.0.1 - 5.0.2.
0.0.1 - 5.0.2
High

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
org.springframework.boot:spring-boot-configuration-processor
Version 4.2.0-M2
—
—
org.springframework.boot:spring-boot-restclient
Version 4.2.0-M2
—
—
org.springframework.boot:spring-boot-starter-actuator
Version 4.2.0-M2
—
—
org.springframework.boot:spring-boot-starter-web
Version 4.2.0-M2
—
—
org.springframework.boot:spring-boot-starter-webflux
Version 4.2.0-M2
—
—

Weekly Downloads

Info

Last Published
18 days ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform