{"items":[{"id":"CVE-2026-59319","published":"2026-08-27T18:04:46.944Z","updated":"2026-08-28T22:47:00.784Z","title":"RediSearch Tag Injection in RedisChatMemoryRepository Allows Cross-Conversation Data Exposure","severity":"MEDIUM","score":4.3,"vendor":"Spring","product":"Spring AI","kev":false,"epss":0.00301,"kevAdded":null},{"id":"CVE-2026-59294","published":"2026-08-27T17:57:52.047Z","updated":"2026-08-28T18:36:07.272Z","title":"Arbitrary File Write via Path Traversal in ResourceCacheService","severity":"MEDIUM","score":5.9,"vendor":"Spring","product":"Spring AI","kev":false,"epss":0.0036,"kevAdded":null},{"id":"CVE-2026-47852","published":"2026-08-26T23:28:42.767Z","updated":"2026-08-27T15:13:55.925Z","title":"Predictable cache directory location allows local ONNX model substitution in Spring AI","severity":"HIGH","score":7.5,"vendor":"Spring","product":"Spring AI","kev":false,"epss":0.00347,"kevAdded":null},{"id":"CVE-2026-47851","published":"2026-08-26T23:28:41.732Z","updated":"2026-08-27T15:14:42.087Z","title":"Unbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document Reader","severity":"HIGH","score":7.5,"vendor":"Spring","product":"Spring AI","kev":false,"epss":0.0046,"kevAdded":null},{"id":"CVE-2026-59318","published":"2026-08-21T12:07:10.349Z","updated":"2026-08-22T03:55:38.874Z","title":"DefaultToolCallingManager Global Resolver Fallback Allows Unadvertised Tool Dispatch via Prompt Injection","severity":"MEDIUM","score":6.5,"vendor":"Spring","product":"Spring AI","kev":false,"epss":0.00254,"kevAdded":null},{"id":"CVE-2026-59308","published":"2026-08-21T12:07:07.992Z","updated":"2026-08-21T14:29:06.814Z","title":"Semantic Cache Cross-Tenant Isolation Bypass via SHA-256 Truncation","severity":"MEDIUM","score":4.2,"vendor":"Spring","product":"Spring AI","kev":false,"epss":0.00224,"kevAdded":null},{"id":"CVE-2026-59279","published":"2026-08-21T12:07:05.567Z","updated":"2026-08-21T14:28:41.415Z","title":"Unbounded persistent session allocation via repeated initialize requests","severity":"HIGH","score":7.5,"vendor":"Spring","product":"Spring AI","kev":false,"epss":0.00549,"kevAdded":null},{"id":"CVE-2026-47835","published":"2026-06-15T18:54:19.841Z","updated":"2026-06-15T20:06:56.646Z","title":"Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores","severity":"HIGH","score":8.6,"vendor":"Spring","product":"Spring AI","kev":false,"epss":0.00304,"kevAdded":null},{"id":"CVE-2026-41863","published":"2026-05-25T05:45:37.690Z","updated":"2026-05-26T14:19:10.481Z","title":"LLM-influenced filename used unsanitized in Path.resolve before file write in Spring AI support for Anthropic Skills API","severity":"MEDIUM","score":6.5,"vendor":"Spring","product":"Spring AI","kev":false,"epss":0.00398,"kevAdded":null},{"id":"CVE-2026-41705","published":"2026-05-09T00:34:17.870Z","updated":"2026-05-11T14:38:29.738Z","title":"Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized document IDs. Spring AI 1.0.x:…","severity":"HIGH","score":8.6,"vendor":"Spring","product":"Spring AI","kev":false,"epss":0.00353,"kevAdded":null},{"id":"CVE-2026-40980","published":"2026-04-28T07:31:24.041Z","updated":"2026-04-28T12:32:40.140Z","title":"In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when handled by `ForkPDFLayoutTextStripper`.…","severity":"MEDIUM","score":6.5,"vendor":"Spring","product":"Spring AI","kev":false,"epss":0.0024,"kevAdded":null},{"id":"CVE-2026-40979","published":"2026-04-28T07:31:21.447Z","updated":"2026-04-28T12:33:07.977Z","title":"In Spring AI, having access to a shared environment can expose the ONNX model used by the application. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in…","severity":"MEDIUM","score":6.1,"vendor":"Spring","product":"Spring AI","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2026-40978","published":"2026-04-28T07:18:53.774Z","updated":"2026-04-29T03:55:35.548Z","title":"SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via crafted document IDs. Affected versions:…","severity":"HIGH","score":8.8,"vendor":"Spring","product":"Spring AI","kev":false,"epss":0.00338,"kevAdded":null},{"id":"CVE-2026-40967","published":"2026-04-28T06:03:51.857Z","updated":"2026-04-29T13:29:47.165Z","title":"In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector store query languages.…","severity":"HIGH","score":8.6,"vendor":"Spring","product":"Spring AI","kev":false,"epss":0.00394,"kevAdded":null},{"id":"CVE-2026-22744","published":"2026-03-27T05:38:59.633Z","updated":"2026-06-02T16:05:50.935Z","title":"In RedisFilterExpressionConverter of spring-ai-redis-store, when a user-controlled string is passed as a filter value for a TAG field, stringValue() inserts…","severity":"HIGH","score":7.5,"vendor":"Spring","product":"Spring AI","kev":false,"epss":0.00255,"kevAdded":null},{"id":"CVE-2026-22743","published":"2026-03-27T05:33:20.872Z","updated":"2026-03-27T19:38:58.544Z","title":"Server-Side Request Forgery via Filter Expression Keys in Neo4jVectorStore","severity":"HIGH","score":7.5,"vendor":"Spring","product":"Spring AI","kev":false,"epss":0.00255,"kevAdded":null},{"id":"CVE-2026-22742","published":"2026-03-27T05:27:41.165Z","updated":"2026-05-10T13:03:54.063Z","title":"Server-Side Request Forgery in BedrockProxyChatModel via Unvalidated Media URL Fetching","severity":"HIGH","score":8.6,"vendor":"Spring","product":"Spring AI","kev":false,"epss":0.00359,"kevAdded":null},{"id":"CVE-2026-22738","published":"2026-03-27T05:21:07.168Z","updated":"2026-05-10T13:04:38.045Z","title":"SpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code Execution","severity":"CRITICAL","score":9.8,"vendor":"Spring","product":"Spring AI","kev":false,"epss":0.01107,"kevAdded":null}]}