Spring Batch (Broadcom) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 125 known versions, newest CVE from 2026-08-27. Vendor: Broadcom.

CVEs of Spring Batch

• CVE-2026-47881 - CVSS 7.5 (high), 2026-08-27: Spring Batch's FlatFileItemReader supports files where a single logical record spans multiple physical lines — for example, a CSV field that contains embedded…
• CVE-2026-47878 - CVSS 7.3 (high), 2026-08-27: DefaultExecutionContextSerializer, used by default in Spring Batch's JDBC job repository, passes Base64-decoded bytes directly to…
• CVE-2026-47875 - CVSS 9.8 (critical), 2026-08-27: Applications that deserialize execution contexts with Jackson2ExecutionContextStringSerializer are vulnerable to a deserialization attack if they use an…
• CVE-2020-5411 - CVSS 8.1 (high), 2020-06-11: When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary code execution. Jackson fixed this…
• CVE-2019-3774 - CVSS 9.8 (critical), 2019-01-18: Spring Batch versions 3.0.9, 4.0.1, 4.1.0, and older unsupported versions, were susceptible to XML External Entity Injection (XXE) when receiving XML data…