Known vulnerabilities in the org.springframework.batch:spring-batch-core package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free

Vulnerability Vulnerable Version

Vulnerability	Vulnerable Version
C XML External Entity (XXE) Injection org.springframework.batch:spring-batch-core is a framework for writing offline and batch applications using Spring and Java. Affected versions of this package are vulnerable to XML External Entity (XXE) Injection when receiving XML data from untrusted sources. How to fix XML External Entity (XXE) Injection? Upgrade `org.springframework.batch:spring-batch-core` to version 4.1.1.RELEASE, 4.0.2.RELEASE, 3.0.10.RELEASE or higher.	[4.1.0.RELEASE,4.1.1.RELEASE)[4.0.0.RELEASE,4.0.2.RELEASE)[3.0.9.RELEASE,3.0.10.RELEASE)

XML External Entity (XXE) Injection

org.springframework.batch:spring-batch-core is a framework for writing offline and batch applications using Spring and Java.

Affected versions of this package are vulnerable to XML External Entity (XXE) Injection when receiving XML data from untrusted sources.

How to fix XML External Entity (XXE) Injection?

Upgrade org.springframework.batch:spring-batch-core to version 4.1.1.RELEASE, 4.0.2.RELEASE, 3.0.10.RELEASE or higher.

[4.1.0.RELEASE,4.1.1.RELEASE)[4.0.0.RELEASE,4.0.2.RELEASE)[3.0.9.RELEASE,3.0.10.RELEASE)

Go back to all versions of this package