Spring Integration SMB Support
84%
Total Score
healthy
Healthy, with active maintenance and signed publication; the M2 label is the main caveat.
This is a pre-release milestone (7.2.0-M2), which adds adoption risk compared with a final release, although it is within a stable major version and pre-releases are an established part of recent releases.
The audit covered all 21 workflows with no untrusted checkouts or script-injection findings. However, 16 of 25 action references are unpinned; the reported template-injection findings are hygiene concerns without the dangerous triggers that would materially amplify them.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-356469 spring-integration-smb is vulnerable to Selection of Less-Secure Algorithm During Negotiation in versions 6.4.0 - 7.0.5 and 7.1.0 - 7.1.0. | 6.4.0 - 7.0.57.1.0 - 7.1.0 | Medium |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
org.springframework.integration:spring-integration-core Version 7.2.0-M2 | — | — |
org.springframework.integration:spring-integration-file Version 7.2.0-M2 | — | — |
org.codelibs:jcifs Version 3.0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.