What’s Vulnerable › Products

Spring Batch vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Spring Batch version is affected

Latest Spring Batch vulnerabilities

• CVE-2026-47881 — Denial of Service in Spring Batch FlatFileItemReader via Malformed Input File (CVSS 7.5)
• CVE-2026-47878 — Unsafe Java deserialization in DefaultExecutionContextSerializer without class allowlist (CVSS 7.3)
• CVE-2026-47875 — JobParameterDeserializer bypasses the trusted-type allowlist (CVSS 9.8)
• CVE-2020-5411 — Jackson Configuration Allows Code Execution with Unknown "Serialization Gadgets" (CVSS 8.1)
• CVE-2019-3774 — Spring Batch XML External Entity Injection (XXE) (CVSS 9.8)