spring-security-ldap
Spring Security
88%
Total Score
healthy
Healthy, supported by active development, signed artifacts, and strong organizational backing; use the milestone release with normal prerelease caution.
Health Score Breakdown
This is a prerelease milestone version, so API or behavior changes remain more likely than in a final stable release, despite the stable major line and active recent prerelease history.
All 12 workflows were analyzed successfully, all 28 action references are pinned, and most workflows use read-only permissions. High-confidence template-injection and secrets-inherit findings are workflow hygiene concerns, but no untrusted checkout or script-injection sink was found.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-288860 spring-security-ldap is vulnerable to Use of Hard-coded Credentials in versions 5.7.0 - 7.0.6 and 7.1.0 - 7.1.0. | 5.7.0 - 7.0.67.1.0 - 7.1.0 | Critical |
AIKIDO-2024-10471 spring-security-ldap is vulnerable to Authorization Bypass in versions 0.0.1 - 6.2.7 and 6.3.0 - 6.3.4. | 0.0.1 - 6.2.76.3.0 - 6.3.4 | Medium |
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 org.springframework.security:spring-security-core Version 7.2.0-M2 | — | — |
org.springframework:spring-beans Version 7.1.0-M2 | — | — |
org.springframework:spring-context Version 7.1.0-M2 | — | — |
org.springframework:spring-core Version 7.1.0-M2 | — | — |
org.springframework:spring-tx Version 7.1.0-M2 | — | — |
Weekly Downloads
Info
- Last Published
- 17 days ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.