Spring Ai (Vmware) - vulnerabilities (CVEs)

23 CVEs, 0 in the last 30 days, 48 known versions, newest CVE from 2026-08-27. Vendor: Vmware.

CVEs of Spring Ai

• CVE-2026-59319 - CVSS 4.3 (medium), 2026-08-27: RedisChatMemoryRepository.findByMetadata() builds RediSearch tag and text queries from caller-supplied metadata values without applying…
• CVE-2026-59294 - CVSS 6.5 (medium), 2026-08-27: ResourceCacheService.getCacheName() builds the on-disk filename by appending the URI fragment verbatim, without stripping path separators or .. sequences, and…
• CVE-2026-47852 - CVSS 7.5 (high), 2026-08-26: A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file. Spring AI 2.0.0 Spring AI 1.1.0 -…
• CVE-2026-47851 - CVSS 7.5 (high), 2026-08-26: Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError in the ingestion thread. Spring AI 2.0.0 Spring AI 1.1.0 -…
• CVE-2026-59318 - CVSS 9.8 (critical), 2026-08-21: In Spring AI's tool calling support, the per-request tool list is advertised to the model as a boundary but is not fully enforced when a tool call is…
• CVE-2026-59308 - CVSS 4.3 (medium), 2026-08-21: In Spring AI's Semantic Cache support, the context hash used to isolate cached responses between different system prompts could allow cached responses to be…
• CVE-2026-59279 - CVSS 7.5 (high), 2026-08-21: The MCP Streamable HTTP server transport (WebFlux and WebMvc variants) does not place any limit on the number of sessions it retains, and by default does not…
• CVE-2026-47835 - CVSS 8.6 (high), 2026-06-15: In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB.…
• CVE-2026-41863 - CVSS 6.5 (medium), 2026-05-25: Spring AI's support for Anthropic's Skills API used LLM-influenced filenames unsanitized in Path.resolve before writing files to disk. This could allow a…
• CVE-2026-41713 - CVSS 8.2 (high), 2026-05-12: A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an unintended way. Applications using the…
• CVE-2026-41712 - CVSS 7.5 (high), 2026-05-12: Spring AI's chat memory component contained a problematic default that, when not explicitly overridden, could result in unintended data exposure between users.
• CVE-2026-41705 - CVSS 8.6 (high), 2026-05-09: Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized document IDs. Spring AI 1.0.x:…
• CVE-2026-40979 - CVSS 6.1 (medium), 2026-04-28: In Spring AI, having access to a shared environment can expose the ONNX model used by the application. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in…
• CVE-2026-40978 - CVSS 8.8 (high), 2026-04-28: SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via crafted document IDs. Affected…
• CVE-2026-40980 - CVSS 6.5 (medium), 2026-04-28: In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when handled by `ForkPDFLayoutTextStripper`.…
• CVE-2026-40966 - CVSS 5.9 (medium), 2026-04-28: In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histories, including secrets and…
• CVE-2026-40967 - CVSS 8.6 (high), 2026-04-28: In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector store query languages.…
• CVE-2026-22744 - CVSS 7.5 (high), 2026-03-27: In RedisFilterExpressionConverter of spring-ai-redis-store, when a user-controlled string is passed as a filter value for a TAG field, stringValue() inserts…
• CVE-2026-22738 - CVSS 9.8 (critical), 2026-03-27: In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a filter expression key. A malicious actor…
• CVE-2026-22743 - CVSS 7.5 (high), 2026-03-27: Spring AI's spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVectorFilterExpressionConverter. When a user-controlled string is passed…
• CVE-2026-22742 - CVSS 8.6 (high), 2026-03-27: Spring AI's spring-ai-bedrock-converse contains a Server-Side Request Forgery (SSRF) vulnerability in BedrockProxyChatModel when processing multimodal…
• CVE-2026-22730 - CVSS 8.8 (high), 2026-03-18: A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass metadata-based access controls and execute…
• CVE-2026-22729 - CVSS 8.6 (high), 2026-03-18: A JSONPath injection vulnerability in Spring AI's AbstractFilterExpressionConverter allows authenticated users to bypass metadata-based access controls…