Implementation of core API for Spring Cloud Function
88%
Total Score
healthy
Healthy release with active maintenance and signed publishing; its pre-release status is the main caveat.
The repository name does not match this Maven module and its README does not mention the exact package, which is a mild identity-transparency gap; the organization-backed monorepo structure and module tree partly compensate.
This release is a pre-release milestone (5.1.0-M1), so compatibility may change even though it belongs to a stable major line.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-86806 spring-cloud-function-context is vulnerable to Incorrect Resource Transfer Between Spheres in versions 0.0.1 - 5.0.3. | 0.0.1 - 5.0.3 | Low |
AIKIDO-2026-866092 spring-cloud-function-context is vulnerable to Path Traversal in versions 4.2.0 - 5.0.3. | 4.2.0 - 5.0.3 | Low |
AIKIDO-2026-10805 spring-cloud-function-context is vulnerable to Denial of Service (DoS) in versions 0.0.1 - 3.1.15, 4.0.0 - 4.1.9, 4.2.0 - 4.2.5, 4.3.0 - 4.3.2 and 5.0.0 - 5.0.1. | 0.0.1 - 3.1.154.0.0 - 4.1.94.2.0 - 4.2.5 +2 more | Medium |
AIKIDO-2026-10804 spring-cloud-function-context is vulnerable to Denial of Service (DoS) in versions 0.0.1 - 3.1.15, 4.0.0 - 4.1.9, 4.2.0 - 4.2.5, 4.3.0 - 4.3.2 and 5.0.0 - 5.0.1. | 0.0.1 - 3.1.154.0.0 - 4.1.94.2.0 - 4.2.5 +2 more | Medium |
CVE-2024-22271 org.springframework.cloud:spring-cloud-function-context is vulnerable to Improper Input Validation in versions 4.0.0 - 4.0.8 and 4.1.0 - 4.1.2. | 4.0.0 - 4.0.84.1.0 - 4.1.2 | High |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
org.springframework.boot:spring-boot-autoconfigure Version 4.2.0-M2 | — | — |
org.springframework.boot:spring-boot-restclient Version 4.2.0-M2 | — | — |
org.springframework.boot:spring-boot-web-server Version 4.2.0-M2 | — | — |
org.springframework.cloud:spring-cloud-function-core Version 5.1.0-M1 | — | — |
org.springframework:spring-messaging Version 7.1.0-M2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.