Aller au contenu
en Se connecter
5.9 Moyenne

CVE-2026-59294 ResourceCacheService.getCacheName() builds the on-disk filename by appending the URI fragment verbatim, without…

Description

ResourceCacheService.getCacheName() builds the on-disk filename by appending the URI fragment verbatim, without stripping path separators or .. sequences, and passes the result to new File(resourceParentFolder, newFileName) before writing the downloaded bytes there. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.9 and earlier

Produits et versions touchés

Produit Versions touchées Corrigé en
Spring AI 2.0.0 Pas de correctif indiqué
Spring AI 1.1 1.1.0 → 1.1.8 Pas de correctif indiqué
Spring AI 1.0 premières → 1.0.9 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Spring AI

Les 18 CVE de Spring AI →
CVE-2026-59319 RedisChatMemoryRepository.findByMetadata() builds RediSearch tag and text queries from caller-supplied metadata values… 4.3 Moyenne CVE-2026-47852 A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file 7.5 Élevée CVE-2026-47851 Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError in the ingestion thread 7.5 Élevée CVE-2026-59318 In Spring AI's tool calling support, the per-request tool list is advertised to the model as a boundary but is not fully… 6.5 Moyenne
Suivre cette CVE