Spring Spring AI

• CVE-2026-59319 Medium 4.3 RediSearch Tag Injection in RedisChatMemoryRepository Allows Cross-Conversation Data Exposure 0.3%
• CVE-2026-59294 Medium 5.9 Arbitrary File Write via Path Traversal in ResourceCacheService 0.4%
• CVE-2026-47852 High 7.5 Predictable cache directory location allows local ONNX model substitution in Spring AI 0.3%
• CVE-2026-47851 High 7.5 Unbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document Reader 0.5%
• CVE-2026-59318 Medium 6.5 DefaultToolCallingManager Global Resolver Fallback Allows Unadvertised Tool Dispatch via Prompt Injection 0.3%
• CVE-2026-59308 Medium 4.2 Semantic Cache Cross-Tenant Isolation Bypass via SHA-256 Truncation 0.2%
• CVE-2026-59279 High 7.5 Unbounded persistent session allocation via repeated initialize requests 0.5%
• CVE-2026-47835 High 8.6 Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores 0.3%
• CVE-2026-41863 Medium 6.5 LLM-influenced filename used unsanitized in Path.resolve before file write in Spring AI support for Anthropic Skills API 0.4%
• CVE-2026-41705 High 8.6 Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized document IDs. Spring AI 1.0.x: affected from 1.0.0 through latest 1.0.x; upgrad 0.4%
• CVE-2026-40980 Medium 6.5 In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when handled by `ForkPDFLayoutTextStripper`. Affected versions: Spring AI: 1.0.0 - 1.0 0.2%
• CVE-2026-40979 Medium 6.1 In Spring AI, having access to a shared environment can expose the ONNX model used by the application. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5) 0.1%
• CVE-2026-40978 High 8.8 SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via crafted document IDs. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0. 0.3%
• CVE-2026-40967 High 8.6 In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector store query languages. In several cases, keys and values are not 0.4%
• CVE-2026-22744 High 7.5 In RedisFilterExpressionConverter of spring-ai-redis-store, when a user-controlled string is passed as a filter value for a TAG field, stringValue() inserts the value directly into the @field:{VALUE}  0.3%
• CVE-2026-22743 High 7.5 Server-Side Request Forgery via Filter Expression Keys in Neo4jVectorStore 0.3%
• CVE-2026-22742 High 8.6 Server-Side Request Forgery in BedrockProxyChatModel via Unvalidated Media URL Fetching 0.4%
• CVE-2026-22738 Critical 9.8 SpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code Execution 1.1%