CVE-2026-47881

Spring Batch's FlatFileItemReader is vulnerable to a Denial of Service via a specially crafted input file. Because the reader supports logical records spanning multiple physical lines (e.g., quoted CSV fields with embedded newlines), a malicious file can exploit the record-assembly logic to consu...

EUVD-2026-66844

Spring Batch's FlatFileItemReader supports files where a single logical record spans multiple physical lines — for example, a CSV field that contains embedded newlines wrapped in quotes. A specially crafted input file could exploit the way the reader assembles those multi-line records to consume...