Package Health/org.springframework.cloud:spring-cloud-gateway-server-webflux

spring-cloud-gateway-server-webflux

Spring Cloud Gateway Server WebFlux

Latest 5.1.0-M1org.springframework.cloud

Maven

80%

Total Score

healthy

Healthy, with active maintenance and signed publishing; the repository does not explicitly identify this package, which is the main caveat.

Are you affected? Scan for Free

Health Score Breakdown

Repo package mention

The repository name does not match the package and its README does not mention the package, so the link is less explicit than ideal. The package's Maven coordinates and the repository's large Spring Cloud Gateway module tree provide some contextual compensation.

Version stability

This is a prerelease milestone version, so its API and behavior may change more than a final release. The package has a stable major line, which partly offsets that concern.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-790325 spring-cloud-gateway-server-webflux is vulnerable to Server-Side Request Forgery (SSRF) in versions 5.0.0 - 5.0.2.	5.0.0 - 5.0.2	High
CVE-2025-41253 org.springframework.cloud:spring-cloud-gateway-server-webflux is vulnerable to Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection').	—	High
CVE-2025-41243 org.springframework.cloud:spring-cloud-gateway-server-webflux is vulnerable to Improper Control of Generation of Code ('Code Injection') in versions 3.1.0 - 3.1.10, 4.0.0 - 4.1.10, 4.2.0 - 4.2.5 and 4.3.0 - 4.3.1.	3.1.0 - 3.1.104.0.0 - 4.1.104.2.0 - 4.2.5 +1 more	Critical

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
org.springframework.boot:spring-boot-starter Version 4.2.0-M2	—	—
org.springframework.boot:spring-boot-starter-validation Version 4.2.0-M2	—	—
org.springframework.boot:spring-boot-starter-oauth2-client Version 4.2.0-M2	—	—
org.springframework.boot:spring-boot-starter-actuator Version 4.2.0-M2	—	—
io.micrometer:micrometer-tracing Version 1.8.0-M2	—	—