spring-integration-zip
Spring Integration Zip Support
84%
Total Score
healthy
Healthy: active maintenance and strong project backing outweigh workflow pinning gaps.
Health Score Breakdown
This is a prerelease milestone rather than a final release, so consumers should expect possible changes even though it belongs to a stable major line.
The audit covered all 21 workflows and found no untrusted checkouts or script-injection paths, but 16 of 25 action references are unpinned; high-confidence template-injection findings remain workflow hygiene concerns without a corroborating dangerous trigger.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-167518 spring-integration-zip is vulnerable to Path Traversal in versions 6.4.0 - 7.0.5 and 7.1.0 - 7.1.0. | 6.4.0 - 7.0.57.1.0 - 7.1.0 | Medium |
AIKIDO-2026-874096 spring-integration-zip is vulnerable to Denial of Service (DoS) in versions 6.4.0 - 7.0.5 and 7.1.0 - 7.1.0. | 6.4.0 - 7.0.57.1.0 - 7.1.0 | Medium |
AIKIDO-2026-293559 spring-integration-zip is vulnerable to Path Traversal in versions 6.4.0 - 7.0.5 and 7.1.0 - 7.1.0. | 6.4.0 - 7.0.57.1.0 - 7.1.0 | Medium |
CVE-2018-1263 org.springframework.integration:spring-integration-zip is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.0.0 - 1.0.2. | 0.0.0 - 1.0.2 | Medium |
CVE-2021-22114 org.springframework.integration:spring-integration-zip is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.0.0 - 1.0.4. | 0.0.0 - 1.0.4 | Medium |
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 org.springframework.integration:spring-integration-core Version 7.2.0-M2 | — | — |
org.springframework.integration:spring-integration-file Version 7.2.0-M2 | — | — |
org.zeroturnaround:zt-zip Version 1.18.2 | — | — |
Weekly Downloads
Info
- Last Published
- 19 days ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.