Spring Spring Batch
4 CVEs affecting Spring Spring Batch. Latest disclosed: 2026-08-27. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-3774 | Critical | 9.8 | 2019-01-18 | Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data from… |
CVE-2026-47881 | Medium | 5.9 | 2026-08-27 | Spring Batch's FlatFileItemReader supports files where a single logical record spans multiple physical lines — for example, a CSV field that contains embedded… |
CVE-2026-47878 | Medium | 5.6 | 2026-08-27 | DefaultExecutionContextSerializer, used by default in Spring Batch's JDBC job repository, passes Base64-decoded bytes directly to ObjectInputStream.readObject(… |
CVE-2026-47875 | Medium | 5.6 | 2026-08-27 | Applications that deserialize execution contexts with Jackson2ExecutionContextStringSerializer are vulnerable to a deserialization attack if they use an untrus… |