Package Health/org.springframework.security:spring-security-webauthn

spring-security-webauthn

Spring Security

Latest 7.2.0-M2org.springframework.security

Maven

86%

Total Score

healthy

Healthy; frequent releases and active project maintenance outweigh its prerelease status and concentrated contribution pattern.

Are you affected? Scan for Free

Health Score Breakdown

Repo bus factor

One contributor made 78.5% of recent commits, creating concentration risk, although seven other contributors were active during the same period.

Version stability

7.2.0-M2 is a prerelease, and half of recent releases are prereleases, so this milestone may change before the stable line is finalized.

Workflow audit

All 12 workflows were analyzed and all 28 action references are pinned, but the audit found a high-confidence template-injection issue and several high-confidence secrets-inherit findings; four workflows also grant top-level write access.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-620149 spring-security-webauthn is vulnerable to Authentication Bypass in versions 7.0.0 - 7.0.6 and 7.1.0 - 7.1.0.	7.0.0 - 7.0.67.1.0 - 7.1.0	High

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
org.springframework.security:spring-security-core Version 7.2.0-M2	—	—
org.springframework.security:spring-security-web Version 7.2.0-M2	—	—
org.springframework:spring-core Version 7.1.0-M2	—	—
org.springframework:spring-beans Version 7.1.0-M2	—	—
org.springframework:spring-web Version 7.1.0-M2	—	—