{"items":[{"id":"CVE-2026-47881","published":"2026-08-27T05:20:26.323Z","updated":"2026-08-27T14:21:14.631Z","title":"Denial of Service in Spring Batch FlatFileItemReader via Malformed Input File","severity":"MEDIUM","score":5.9,"vendor":"Spring","product":"Spring Batch","kev":false,"epss":0.00405,"kevAdded":null,"exploit":false},{"id":"CVE-2026-47878","published":"2026-08-27T05:20:23.462Z","updated":"2026-08-27T14:32:28.405Z","title":"Unsafe Java deserialization in DefaultExecutionContextSerializer without class allowlist","severity":"MEDIUM","score":5.6,"vendor":"Spring","product":"Spring Batch","kev":false,"epss":0.00352,"kevAdded":null,"exploit":false},{"id":"CVE-2026-47875","published":"2026-08-27T05:20:21.578Z","updated":"2026-08-28T16:52:00.046Z","title":"JobParameterDeserializer bypasses the trusted-type allowlist","severity":"MEDIUM","score":5.6,"vendor":"Spring","product":"Spring Batch","kev":false,"epss":0.00426,"kevAdded":null,"exploit":false},{"id":"CVE-2019-3774","published":"2019-01-18T22:00:00.000Z","updated":"2024-09-16T20:57:23.130Z","title":"Spring Batch XML External Entity Injection (XXE)","severity":"CRITICAL","score":9.8,"vendor":"Spring","product":"Spring Batch","kev":false,"epss":0.03057,"kevAdded":null,"exploit":false}]}