Spring / Spring Batch

4 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-47881	Denial of Service in Spring Batch FlatFileItemReader via Malformed Input File	HIGH	7.5	Aug 27, 2026
CVE-2026-47878	Unsafe Java deserialization in DefaultExecutionContextSerializer without class allowlist	HIGH	7.3	Aug 27, 2026
CVE-2026-47875	JobParameterDeserializer bypasses the trusted-type allowlist	CRITICAL	9.8	Aug 27, 2026
CVE-2019-3774	Spring Batch XML External Entity Injection (XXE)	CRITICAL	9.8	Jan 18, 2019

Rows per page

Showing 1 to 4 of 4 CVEs