{
  "@id": "urn:uuid:96b81d63-6080-41ab-8ef4-e36b97822f21",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 4,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-29T15:30:49.741847+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.batch/spring-batch-integration@3.0.10.RELEASE-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.batch/spring-batch-integration@3.0.10.RELEASE-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-28T22:02:19.515243+00:00",
      "status_notes": "Vulnerability CVE-2019-3774 affects version 3.0.10.RELEASE-tuxcare.2 of org.springframework.batch:spring-batch-integration.",
      "vulnerability": {
        "name": "CVE-2019-3774"
      },
      "action_statement": "Vulnerability CVE-2019-3774 affects version 3.0.10.RELEASE-tuxcare.2 of org.springframework.batch:spring-batch-integration."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.batch/spring-batch-integration@3.0.10.RELEASE-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.batch/spring-batch-integration@3.0.10.RELEASE-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-14T14:54:01.956685+00:00",
      "status_notes": "Vulnerability CVE-2020-5411 affects version 3.0.10.RELEASE-tuxcare.2 of org.springframework.batch:spring-batch-integration.",
      "vulnerability": {
        "name": "CVE-2020-5411"
      },
      "action_statement": "Vulnerability CVE-2020-5411 affects version 3.0.10.RELEASE-tuxcare.2 of org.springframework.batch:spring-batch-integration."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.batch/spring-batch-integration@3.0.10.RELEASE-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.batch/spring-batch-integration@3.0.10.RELEASE-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-29T15:30:49.741847+00:00",
      "status_notes": "Vulnerability CVE-2026-47875 does not affect version 3.0.10.RELEASE-tuxcare.2 of org.springframework.batch:spring-batch-integration. not_affected \u2014 Spring Batch 3.0.10.RELEASE is not affected by CVE-2026-47875. The vulnerable code (JobParameterDeserializer class with unchecked Class.forName()) was introduced in Spring Batch 5.0.0 (September 2022), years after 3.0.10.RELEASE. This version only supports four fixed parameter types (String, Long, Date, Double) and lacks the arbitrary type deserialization mechanism that enables the vulnerabilit...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-47875"
      },
      "impact_statement": "not_affected \u2014 Spring Batch 3.0.10.RELEASE is not affected by CVE-2026-47875. The vulnerable code (JobParameterDeserializer class with unchecked Class.forName()) was introduced in Spring Batch 5.0.0 (September 2022), years after 3.0.10.RELEASE. This version only supports four fixed parameter types (String, Long, Date, Double) and lacks the arbitrary type deserialization mechanism that enables the vulnerabilit..."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.batch/spring-batch-integration@3.0.10.RELEASE-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.batch/spring-batch-integration@3.0.10.RELEASE-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-14T14:54:01.956685+00:00",
      "status_notes": "Vulnerability CVE-2026-47878 is fixed in version 3.0.10.RELEASE-tuxcare.2 of org.springframework.batch:spring-batch-integration.",
      "vulnerability": {
        "name": "CVE-2026-47878"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.batch/spring-batch-integration@3.0.10.RELEASE-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.batch/spring-batch-integration@3.0.10.RELEASE-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-14T14:54:01.956685+00:00",
      "status_notes": "Vulnerability CVE-2026-47881 is fixed in version 3.0.10.RELEASE-tuxcare.2 of org.springframework.batch:spring-batch-integration.",
      "vulnerability": {
        "name": "CVE-2026-47881"
      }
    }
  ]
}