spring-integration-core
Spring Integration Core
84%
Total Score
healthy
Healthy: strong maintenance and release evidence outweigh workflow hygiene concerns.
Health Score Breakdown
This is a prerelease (7.2.0-M2), so it may change before the stable release even though the major version is established.
All 21 workflows were analyzed without untrusted checkouts or script-injection findings, but 16 of 25 action references are unpinned and high-confidence template-injection hygiene findings were reported; this warrants caution, not a severe verdict because no dangerous trigger or sink was observed.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-748560 spring-integration-core is vulnerable to Information Disclosure in versions 0.0.1 - 7.0.5 and 7.1.0 - 7.1.0. | 0.0.1 - 7.0.57.1.0 - 7.1.0 | High |
AIKIDO-2026-214722 spring-integration-core is vulnerable to Improper Neutralization of Special Elements in versions 0.0.1 - 7.0.5 and 7.1.0 - 7.1.0. | 0.0.1 - 7.0.57.1.0 - 7.1.0 | Medium |
AIKIDO-2026-312870 spring-integration-core is vulnerable to Incorrect Permission Assignment for Critical Resource in versions 0.0.1 - 7.0.5 and 7.1.0 - 7.1.0. | 0.0.1 - 7.0.57.1.0 - 7.1.0 | Low |
AIKIDO-2026-957944 spring-integration-core is vulnerable to Deserialization of Untrusted Data in versions 0.0.1 - 7.0.5 and 7.1.0 - 7.1.0. | 0.0.1 - 7.0.57.1.0 - 7.1.0 | Medium |
CVE-2020-5413 org.springframework.integration:spring-integration-core is vulnerable to Deserialization of Untrusted Data in versions 4.3.0 - 4.3.23, 5.3.0 - 5.3.2, 5.1.0 - 5.1.12 and 5.2.0 - 5.2.8. | 4.3.0 - 4.3.235.1.0 - 5.1.125.2.0 - 5.2.8 +1 more | Critical |
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 org.springframework:spring-aop Version 7.1.0-M2 | — | — |
org.springframework:spring-context Version 7.1.0-M2 | — | — |
org.springframework:spring-messaging Version 7.1.0-M2 | — | — |
org.springframework:spring-tx Version 7.1.0-M2 | — | — |
io.projectreactor:reactor-core Version 3.8.7 | — | — |
Weekly Downloads
Info
- Last Published
- 18 days ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.