Package Health/org.springframework.batch:spring-batch-core

spring-batch-core

Core domain for batch processing, expressing a domain of Jobs, Steps, Chunks, etc

Latest 6.1.0-M2org.springframework.batch

Maven

84%

Total Score

healthy

Healthy release backed by active maintenance and signed publishing, with a prerelease version and workflow hygiene concerns.

Are you affected? Scan for Free

Health Score Breakdown

Version stability

Version 6.1.0-M2 is a prerelease, and 40% of recent releases are prereleases, so API or behavior changes remain more likely than in a final release.

Workflow audit

All 12 workflows were analyzed successfully, all 22 action references are pinned, and no untrusted checkout or script-injection paths were found. However, 25 high-confidence template-injection findings remain, so workflow hygiene warrants caution even without a dangerous trigger combination.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-474902 spring-batch-core is vulnerable to Deserialization of Untrusted Data in versions 0.0.1 - 6.0.4.	0.0.1 - 6.0.4	Medium
AIKIDO-2026-908402 spring-batch-core is vulnerable to Deserialization of Untrusted Data in versions 5.2.0 - 6.0.4.	5.2.0 - 6.0.4	Medium
CVE-2020-5411 org.springframework.batch:spring-batch-core is vulnerable to Deserialization of Untrusted Data in versions 4.0.0 - 4.2.2.	4.0.0 - 4.2.2	High
CVE-2019-3774 org.springframework.batch:spring-batch-core is vulnerable to Improper Restriction of XML External Entity Reference in versions 0.0.0 - 3.0.10.RELEASE, 4.0.0.RELEASE - 4.0.2.RELEASE and 4.1.0.RELEASE - 4.1.0.RELEASE.	0.0.0 - 3.0.10.RELEASE4.0.0.RELEASE - 4.0.2.RELEASE4.1.0.RELEASE - 4.1.0.RELEASE	Critical

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
org.springframework.batch:spring-batch-infrastructure Version 6.1.0-M2	—	—
org.springframework:spring-aop Version 7.1.0-M2	—	—
org.springframework:spring-beans Version 7.1.0-M2	—	—
org.springframework:spring-context Version 7.1.0-M2	—	—
org.springframework:spring-tx Version 7.1.0-M2	—	—