Package Health/org.springframework.security:spring-security-oauth2-client

spring-security-oauth2-client

Spring Security

Latest 7.2.0-M2org.springframework.security

Maven

83%

Total Score

healthy

Healthy, backed by active maintenance and signed releases; 7.2.0-M2 is a prerelease.

Are you affected? Scan for Free

Health Score Breakdown

Version stability

The major line is established, but 7.2.0-M2 is explicitly a prerelease, so API or behavior changes remain possible.

Workflow audit

All 12 workflows were analyzed and all 28 action references are pinned, but four workflows grant top-level write access and high-confidence template-injection and secrets-inherit findings remain hygiene concerns.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2024-10470 spring-security-oauth2-client is vulnerable to Authorization Bypass in versions 0.0.1 - 6.2.7 and 6.3.0 - 6.3.4.	0.0.1 - 6.2.76.3.0 - 6.3.4	Medium
CVE-2022-31690 org.springframework.security:spring-security-oauth2-client is vulnerable to Improper Privilege Management in versions 5.7.0 - 5.7.5 and 0.0.0 - 5.6.9.	0.0.0 - 5.6.95.7.0 - 5.7.5	High

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
org.springframework.security:spring-security-core Version 7.2.0-M2	—	—
org.springframework.security:spring-security-oauth2-core Version 7.2.0-M2	—	—
org.springframework.security:spring-security-web Version 7.2.0-M2	—	—
org.springframework:spring-core Version 7.1.0-M2	—	—
com.nimbusds:oauth2-oidc-sdk Version 11.38.2	—	—