Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.springframework.batch:spring-batch-core

2 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2
Registry
Maven Central

Advisories 2

  • Jackson Configuration Allows Code Execution with Unknown "Serialization Gadgets"

    Affected: from 4.0.0, fixed in 4.2.3.

  • Spring Batch XML External Entity Injection (XXE)

    Affected: fixed in 3.0.10.RELEASE; from 4.0.0.RELEASE, fixed in 4.0.2.RELEASE; from 4.1.0.RELEASE, fixed in 4.1.1.RELEASE.