Package Health/org.springframework.security:spring-security-cas

spring-security-cas

Spring Security

Latest 7.2.0-M2org.springframework.security

Maven

84%

Total Score

healthy

Healthy: active maintenance, signed publication, and organization backing outweigh the prerelease label and workflow hygiene concerns.

Are you affected? Scan for Free

Health Score Breakdown

Version stability

7.2.0-M2 is a prerelease, so API or behavior changes remain possible, although recent prereleases represent only 30% of releases and the major line is established.

Workflow audit

All 12 workflows were analyzed, all 28 action references are pinned, and no untrusted checkout or script-injection path was found. High-confidence template injection and several secrets-inherit findings, plus four workflows with top-level write permissions, remain workflow-hygiene cautions.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2024-10474 spring-security-cas is vulnerable to Authorization Bypass in versions 0.0.1 - 6.2.7 and 6.3.0 - 6.3.4.	0.0.1 - 6.2.76.3.0 - 6.3.4	Medium

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
org.springframework.security:spring-security-core Version 7.2.0-M2	—	—
org.springframework.security:spring-security-web Version 7.2.0-M2	—	—
org.apereo.cas.client:cas-client-core Version 4.1.1	—	—
org.springframework:spring-beans Version 7.1.0-M2	—	—
org.springframework:spring-context Version 7.1.0-M2	—	—