Package Health/org.springframework.cloud:spring-cloud-config-server

spring-cloud-config-server

Latest 5.1.0-M1org.springframework.cloud

Maven

88%

Total Score

healthy

Healthy; active maintenance and strong project backing outweigh the pre-release status.

Are you affected? Scan for Free

Health Score Breakdown

Version stability

Version 5.1.0-M1 is a prerelease, so its API and behavior may still change before the final release. The recent prerelease share of 30% suggests this is part of an active development cycle rather than abandonment.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-247148 spring-cloud-config-server is vulnerable to Path Traversal in versions 0.0.1 - 5.0.4.	0.0.1 - 5.0.4	Medium
AIKIDO-2026-891560 spring-cloud-config-server is vulnerable to Denial of Service (DoS) in versions 0.0.1 - 5.0.4.	0.0.1 - 5.0.4	Medium
AIKIDO-2026-469111 spring-cloud-config-server is vulnerable to Race Condition (TOCTOU) in versions 0.0.1 - 5.0.4.	0.0.1 - 5.0.4	High
AIKIDO-2026-10770 spring-cloud-config-server is vulnerable to Race Condition (TOCTOU) in versions 0.0.1 - 3.1.13, 4.0.0 - 4.1.9, 4.2.0 - 4.2.6, 4.3.0 - 4.3.2 and 5.0.0 - 5.0.2.	0.0.1 - 3.1.134.0.0 - 4.1.94.2.0 - 4.2.6 +2 more	High
AIKIDO-2026-10773 spring-cloud-config-server is vulnerable to Authorization Bypass Through User-Controlled Key in versions 0.0.1 - 3.1.13, 4.0.0 - 4.1.9, 4.2.0 - 4.2.6, 4.3.0 - 4.3.2 and 5.0.0 - 5.0.2.	0.0.1 - 3.1.134.0.0 - 4.1.94.2.0 - 4.2.6 +2 more	High

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
org.springframework.boot:spring-boot-configuration-processor Version 4.2.0-M2	—	—
org.springframework.boot:spring-boot-starter-jdbc Version 4.2.0-M2	—	—
org.springframework.boot:spring-boot-starter-data-redis Version 4.2.0-M2	—	—
org.springframework.cloud:spring-cloud-config-client Version 5.1.0-M1	—	—
org.springframework.boot:spring-boot-starter-actuator Version 4.2.0-M2	—	—