Login Request a demo
SB
Product
Spring Batch
by Spring · last CVE Aug 27, 2026
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 2High 2Medium 0Low 0
Severity
All severities4Critical2High2Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Spring Batch to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-47875
9.8
0%
Aug 27
JobParameterDeserializer bypasses the trusted-type allowlist
Affected: 6.0.0 through 6.0.4; 5.2.0 through 5.2.6
CVE-2019-3774
9.8
3%
Jan 18
Spring Batch XML External Entity Injection (XXE)
Affected: 4.0 before 4.0.1.RELEASE; 4.1 before 4.1.0.RELEASE; 3.0 before 3.0.9.RELEASE
CVE-2026-47881
7.5
0%
Aug 27
Denial of Service in Spring Batch FlatFileItemReader via Malformed Input File
Affected: 6.0.0 through 6.0.4; 5.2.0 through 5.2.6; 4.3.0 through 4.3.13
CVE-2026-47878
7.3
0%
Aug 27
Unsafe Java deserialization in DefaultExecutionContextSerializer without class allowlist
Affected: 6.0.0 through 6.0.4; through 5.2.6
Showing 4