https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 09:02:46 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-359955 EUVD-2026-359955 https://cve.radiocsirt.org/vuln/euvd-2026-359955 https://cve.radiocsirt.org/vuln/fkie_cve-2026-47878 <p>DefaultExecutionContextSerializer, used by default in Spring Batch&#39;s JDBC job repository, passes Base64-decoded bytes directly to ObjectInputStream.readObject() without an ObjectInputFilter that restricts types to a trusted class allowlist. Spring Batch 6.0.0 - 6.0.4 Spring Batch 5.2.6 and earlier</p> <p>DefaultExecutionContextSerializer, used by default in Spring Batch&#39;s JDBC job repository, passes Base64-decoded bytes directly to ObjectInputStream.readObject() without an ObjectInputFilter that restricts types to a trusted class allowlist. Spring Batch 6.0.0 - 6.0.4 Spring Batch 5.2.6 and earlier</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-47878 https://cve.radiocsirt.org/vuln/ghsa-2pwq-qhmm-3vg8 <p>DefaultExecutionContextSerializer, used by default in Spring Batch&#39;s JDBC job repository, passes Base64-decoded bytes directly to ObjectInputStream.readObject() without an ObjectInputFilter that restricts types to a trusted class allowlist. Spring Batch 6.0.0 - 6.0.4 Spring Batch 5.2.6 and earlier</p> <p>DefaultExecutionContextSerializer, used by default in Spring Batch&#39;s JDBC job repository, passes Base64-decoded bytes directly to ObjectInputStream.readObject() without an ObjectInputFilter that restricts types to a trusted class allowlist. Spring Batch 6.0.0 - 6.0.4 Spring Batch 5.2.6 and earlier</p> https://cve.radiocsirt.org/vuln/ghsa-2pwq-qhmm-3vg8