CVE-2026-47881

Name of the Vulnerable Software and Affected Versions Spring Batch versions 6.0.0 through 6.0.4 Spring Batch versions 5.2.0 through 5.2.6 Spring Batch versions 4.3.0 through 4.3.13

Description The FlatFileItemReader allows files where a single logical record spans multiple physical lines, such as CSV fields with embedded newlines wrapped in quotes. A specially crafted input file can exploit the assembly process of these multi-line records to cause excessive CPU and memory consumption, leading to batch job stalls or out-of-memory errors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.