Homepage

org.springframework.batch:spring-batch-infrastructure@5.2.0

  • latest version

    6.0.5

  • latest non vulnerable version

    6.1.0-M1

  • first published

    18 years ago

  • latest version published

    11 days ago

  • licenses detected

  • package registry

    View on Maven Central Repository
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the org.springframework.batch:spring-batch-infrastructure package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Allocation of Resources Without Limits or Throttling

    Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the FlatFileItemReader when handling specially crafted input files that exploit the way multi-line records are assembled. An attacker can cause excessive CPU and memory consumption by providing a malformed file, potentially leading to application stalls or resource exhaustion.

    Note: This is only exploitable if either DefaultRecordSeparatorPolicy or JsonRecordSeparatorPolicy is used; the default SimpleRecordSeparatorPolicy is not affected.

    How to fix Allocation of Resources Without Limits or Throttling?

    Upgrade org.springframework.batch:spring-batch-infrastructure to version 6.0.5 or higher.

    [4.3.0,6.0.5)
    Go back to all versions of this package