| CVE-2026-59319 |
RedisChatMemoryRepository.findByMetadata() builds RediSearch tag and text queries from caller-supplied metadata values…
|
4.3
Medium
|
Aug 27, 2026 |
| CVE-2026-59294 |
ResourceCacheService.getCacheName() builds the on-disk filename by appending the URI fragment verbatim, without…
|
5.9
Medium
|
Aug 27, 2026 |
| CVE-2026-47852 |
A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file
|
7.5
High
|
Aug 26, 2026 |
| CVE-2026-47851 |
Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError in the ingestion thread
|
7.5
High
|
Aug 26, 2026 |
| CVE-2026-59318 |
In Spring AI's tool calling support, the per-request tool list is advertised to the model as a boundary but is not fully…
|
6.5
Medium
|
Aug 21, 2026 |
| CVE-2026-59308 |
In Spring AI's Semantic Cache support, the context hash used to isolate cached responses between different system…
|
4.2
Medium
|
Aug 21, 2026 |
| CVE-2026-59279 |
The MCP Streamable HTTP server transport (WebFlux and WebMvc variants) does not place any limit on the number of…
|
7.5
High
|
Aug 21, 2026 |
| CVE-2026-47835 |
In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in…
|
8.6
High
|
Jun 15, 2026 |
| CVE-2026-41863 |
Spring AI's support for Anthropic's Skills API used LLM-influenced filenames unsanitized in Path.resolve before…
|
6.5
Medium
|
May 25, 2026 |
| CVE-2026-41705 |
Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized…
|
8.6
High
|
May 9, 2026 |
| CVE-2026-40980 |
In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when…
|
6.5
Medium
|
Apr 28, 2026 |
| CVE-2026-40979 |
In Spring AI, having access to a shared environment can expose the ONNX model used by the application
|
6.1
Medium
|
Apr 28, 2026 |
| CVE-2026-40978 |
SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via…
|
8.8
High
|
Apr 28, 2026 |
| CVE-2026-40967 |
In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them…
|
8.6
High
|
Apr 28, 2026 |
| CVE-2026-22744 |
In RedisFilterExpressionConverter of spring-ai-redis-store, when a user-controlled string is passed as a filter value…
|
7.5
High
|
Mar 27, 2026 |
| CVE-2026-22743 |
Spring AI's spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVectorFilterExpressionConverter
|
7.5
High
|
Mar 27, 2026 |
| CVE-2026-22742 |
Spring AI's spring-ai-bedrock-converse contains a Server-Side Request Forgery (SSRF) vulnerability…
|
8.6
High
|
Mar 27, 2026 |
| CVE-2026-22738 |
In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a…
|
9.8
Critical
|
Mar 27, 2026 |