am.ik.spring:spring-batch-migration-helper (0.2.0), com.github.ggreen:sql-task (0.0.1) +47 more potentially affected by CVE-2026-47881 via org.springframework.batch:spring-batch-infrastructure (>=6.0.0, <=6.0.4)

org.springframework.batch:spring-batch-infrastructure MAVEN version =6.0.0, =7.0.1, =1.8.0, =0.0.47, =0.0.47, =0.0.47, =1.1.0, =1.1.0, =1.1.0, =1.2.0 and more Source cves: CVE-2026-47881 Source advisory: MEND:CVE-2026-47881...

am.ik.spring:spring-batch-migration-helper (>=0.1.0, <=0.2.0), au.csiro.pathling:fhir-server (>=5.3.1, <=6.1.4) +437 more potentially affected by CVE-2026-47881 via org.springframework.batch:spring-batch-infrastructure (>=4.3.0, <=6.0.4)

org.springframework.batch:spring-batch-infrastructure MAVEN version =4.3.0, =0.1.0, =5.3.1, =3.3.0, =3.3.0, =3.3.0, =3.3.0, =3.6.0, =3.3.0, =3.6.0, =3.6.0, =3.6.0, =3.6.0, =3.3.0, =3.6...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the FlatFileItemReader when handling specially crafted input files that exploit the way multi-line records are assembled. An attacker can cause excessive CPU and memory consumptio...