Package Health/org.springframework.cloud:spring-cloud-stream

spring-cloud-stream

Messaging Microservices with Spring Integration

Latest 5.1.0-M1org.springframework.cloud

Maven

89%

Total Score

healthy

Healthy, with active maintenance and strong project backing outweighing its prerelease status.

Are you affected? Scan for Free

Health Score Breakdown

Version stability

This release is a prerelease (5.1.0-M1), which adds some adoption risk compared with a final release, although the major line is established and only 30% of recent releases were prereleases.

Workflow audit

All 10 workflows were analyzed with no untrusted checkouts or script-injection findings. One workflow has top-level write permissions and 5 of 17 action references are unpinned; the repeated template-injection findings are workflow hygiene concerns without a corroborating dangerous trigger.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-756931 spring-cloud-stream is vulnerable to Improper Access Control in versions 4.2.0 - 5.0.2.	4.2.0 - 5.0.2	Low
AIKIDO-2026-962935 spring-cloud-stream is vulnerable to Denial of Service (DoS) in versions 4.2.0 - 5.0.2.	4.2.0 - 5.0.2	Low
AIKIDO-2026-200835 spring-cloud-stream is vulnerable to Deserialization of Untrusted Data in versions 4.2.0 - 5.0.2.	4.2.0 - 5.0.2	Low
AIKIDO-2026-622447 spring-cloud-stream is vulnerable to Insertion of Sensitive Information into Log File in versions 4.2.0 - 5.0.2.	4.2.0 - 5.0.2	Low

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
org.springframework.boot:spring-boot-integration Version 4.2.0-M2	—	—
org.springframework.boot:spring-boot-starter-actuator Version 4.2.0-M2	—	—
org.springframework.boot:spring-boot-starter-validation Version 4.2.0-M2	—	—
org.springframework:spring-messaging Version 7.1.0-M2	—	—
org.springframework.integration:spring-integration-core Version 7.2.0-M2	—	—