VMWare Spring AI

• CVE-2026-41713 High 8.2 Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisor 0.2%
• CVE-2026-41712 High 7.5 ChatMemory DEFAULT_CONVERSATION_ID causes unintended cross-user data leakage 0.3%
• CVE-2026-40966 Medium 5.9 VectorStoreChatMemoryAdvisor conversation scoping can lead to cross-tenant memory exfiltration 0.2%
• CVE-2026-22729 High 8.6 CVE-2026-22729: JSONPath Injection in Spring AI Vector Stores FilterExpressionConverter 0.6%
• CVE-2026-22730 High 8.8 CVE-2026-22730: SQL Injection in Spring AI MariaDBFilterExpressionConverter 0.5%