| CVE-2026-41713 |
A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an…
|
8.2
Élevée
|
12 mai 2026 |
| CVE-2026-41712 |
Spring AI's chat memory component contained a problematic default that, when not explicitly overridden, could result…
|
7.5
Élevée
|
12 mai 2026 |
| CVE-2026-40966 |
In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat…
|
5.9
Moyenne
|
28 avr. 2026 |
| CVE-2026-22729 |
A JSONPath injection vulnerability in Spring AI's AbstractFilterExpressionConverter allows authenticated users to bypass…
|
8.6
Élevée
|
18 mars 2026 |
| CVE-2026-22730 |
A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass…
|
8.8
Élevée
|
18 mars 2026 |