Skip to content

Known vulnerabilities in Spring Batch

Is your version affected?

CVE Summary Score Published
CVE-2026-47881 Spring Batch's FlatFileItemReader supports files where a single logical record spans multiple physical lines — for… 5.9 Medium Aug 27, 2026
CVE-2026-47878 DefaultExecutionContextSerializer, used by default in Spring Batch's JDBC job repository, passes Base64-decoded bytes… 5.6 Medium Aug 27, 2026
CVE-2026-47875 Applications that deserialize execution contexts with Jackson2ExecutionContextStringSerializer are vulnerable to a… 5.6 Medium Aug 27, 2026
CVE-2019-3774 Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity… Not rated Jan 18, 2019

Other Spring products