Advisories · Technology
Spring Batch.
Every CVE that names Spring Batch among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.9 Medium
Denial of Service in Spring Batch FlatFileItemReader via Malformed Input File
- Spring Batch
- Denial of service
- CVSS 5.6 Medium
Unsafe Java deserialization in DefaultExecutionContextSerializer without class allowlist
- Spring Batch
- Insecure deserialization
- CVSS 5.6 Medium
JobParameterDeserializer bypasses the trusted-type allowlist
- Spring Batch
- Insecure deserialization