spring-integration-jdbc
Spring Integration JDBC Support
88%
Total Score
healthy
Healthy: sustained project activity and signed Maven provenance support this release.
Health Score Breakdown
The repository name does not match this module and its README does not mention the package, creating a package-identity caution; the organization-owned monorepo structure and matching package tree partly mitigate it.
This release is a milestone prerelease (7.2.0-M2), so it carries more change risk than a final release despite the stable major line.
The audit analyzed all 21 workflows and found no untrusted checkouts or script-injection sinks, but 16 of 25 action references are unpinned; high-confidence template-injection findings remain workflow hygiene concerns without a corroborating dangerous trigger.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-654837 spring-integration-jdbc is vulnerable to Deserialization of Untrusted Data in versions 6.4.0 - 7.0.5 and 7.1.0 - 7.1.0. | 6.4.0 - 7.0.57.1.0 - 7.1.0 | High |
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 org.springframework.integration:spring-integration-core Version 7.2.0-M2 | — | — |
org.springframework:spring-jdbc Version 7.1.0-M2 | — | — |
org.postgresql:postgresql Version 42.7.13 | — | — |
Weekly Downloads
Info
- Last Published
- 19 days ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.