HeroDevs
Visit NES for Spring Home Page

Spring Batch 5.2.x Release Notes

4 versions

Comprehensive release notes and changelog for Spring Batch 5.2.x, including security patches, bug fixes, and feature updates across all supported versions.

Aug 28, 2026
Latest: 5.2.8
3 Patched Vulnerabilities
VEX Statements

August 2026

5.2.8

Released Aug 28, 2026
CVE-2026-47881
CVE-2026-47878
CVE-2026-47875
Full Version: 
5.2.6-spring-batch-5.2.8

Security Fixes

  • Malformed multi-line input can no longer drive unbounded record assembly in FlatFileItemReader, which now fails with a FlatFileParseException once a logical record exceeds a configurable line count or character length (1 MiB by default) (medium severity, CVE-2026-47881).
  • Unfiltered job repository data can no longer make DefaultExecutionContextSerializer instantiate unexpected serializable classes during execution context deserialization (medium severity, CVE-2026-47878).
  • JobParameterDeserializer no longer loads and converts a class named by an untrusted JSON type before validating it, rejecting any type outside the trusted class list (medium severity, CVE-2026-47875).

Dependency Upgrades

  • Spring AMQP (NES) 3.2.12-spring-amqp-3.2.14
  • Spring Data Commons (NES) 3.4.13-spring-data-commons-3.4.18
  • Spring Data JPA (NES) 3.4.13-spring-data-jpa-3.4.18
  • Spring Data MongoDB (NES) 4.4.13-spring-data-mongodb-4.4.18
  • Spring Data Redis (NES) 3.4.13-spring-data-redis-3.4.18
  • Spring Framework (NES) 6.2.19-spring-framework-6.2.21
  • Spring Integration (NES) 6.4.10-spring-integration-6.4.15
  • Spring Kafka (NES) 3.3.16-spring-kafka-3.3.18
  • Spring LDAP (NES) 3.2.16-spring-ldap-3.2.23
  • Spring Retry (NES) 2.0.13-spring-retry-2.0.15

July 2026

5.2.7

Released Jul 9, 2026
Full Version: 
5.2.6-spring-batch-5.2.7

Dependency Upgrades

  • Spring AMQP (NES) 3.2.12-spring-amqp-3.2.13
  • Spring Data Commons (NES) 3.4.13-spring-data-commons-3.4.16
  • Spring Data Commons (NES) 3.4.13-spring-data-commons-3.4.17
  • Spring Data JPA (NES) 3.4.13-spring-data-jpa-3.4.16
  • Spring Data JPA (NES) 3.4.13-spring-data-jpa-3.4.17
  • Spring Data MongoDB (NES) 4.4.13-spring-data-mongodb-4.4.16
  • Spring Data MongoDB (NES) 4.4.13-spring-data-mongodb-4.4.17
  • Spring Data Redis (NES) 3.4.13-spring-data-redis-3.4.16
  • Spring Data Redis (NES) 3.4.13-spring-data-redis-3.4.17
  • Spring Framework (NES) 6.2.19-spring-framework-6.2.20
  • Spring Integration (NES) 6.4.10-spring-integration-6.4.13
  • Spring Integration (NES) 6.4.10-spring-integration-6.4.14
  • Spring Kafka (NES) 3.3.16-spring-kafka-3.3.17
  • Spring LDAP (NES) 3.2.16-spring-ldap-3.2.20
  • Spring LDAP (NES) 3.2.16-spring-ldap-3.2.21
  • Spring Retry (NES) 2.0.13-spring-retry-2.0.14

March 2026

5.2.6

Released Mar 25, 2026
Full Version: 
5.2.4-spring-batch-5.2.6

Dependency Upgrades

  • Spring AMQP (NES) 3.2.8-spring-amqp-3.2.10
  • Spring Data Commons (NES) 3.4.13-spring-data-commons-3.4.15
  • Spring Data JPA (NES) 3.4.13-spring-data-jpa-3.4.15
  • Spring Data MongoDB (NES) 4.4.13-spring-data-mongodb-4.4.15
  • Spring Data Redis (NES) 3.4.13-spring-data-redis-3.4.15
  • Spring Integration (NES) 6.4.10-spring-integration-6.4.12
  • Spring Kafka (NES) 3.3.11-spring-kafka-3.3.13
  • Spring LDAP (NES) 3.2.16-spring-ldap-3.2.19

January 2026

5.2.5

Released Jan 28, 2026
Full Version: 
5.2.4-spring-batch-5.2.5

Notes

  • This release originates from the open‑source Spring Batch repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Batch 5.2.4.

Dependency Upgrades

  • Spring AMQP (NES) 3.2.8-spring-amqp-3.2.9
  • Spring Data Commons (NES) 3.4.13-spring-data-commons-3.4.14
  • Spring Data JPA (NES) 3.4.13-spring-data-jpa-3.4.14
  • Spring Data MongoDB (NES) 4.4.13-spring-data-mongodb-4.4.14
  • Spring Data Redis (NES) 3.4.13-spring-data-redis-3.4.14
  • Spring Integration (NES) 6.4.10-spring-integration-6.4.11
  • Spring Kafka (NES) 3.3.11-spring-kafka-3.3.12

Stay in the loop

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.