Product by Spring
Spring AI
18 known vulnerabilities in Spring AI (Spring), 0 of them actively exploited (CISA KEV).
Key figures
18
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-22738 | SpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code Execution | 9.8 | |
| High | CVE-2026-59279 | Unbounded persistent session allocation via repeated initialize requests | 7.5 | |
| High | CVE-2026-47851 | Unbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document Reader | 7.5 | |
| High | CVE-2026-40967 | Spring AI: Code Injection | 8.6 | |
| High | CVE-2026-47852 | Predictable cache directory location allows local ONNX model substitution in Spring AI | 7.5 | |
| High | CVE-2026-41705 | Spring AI: Expression Language Injection | 8.6 | |
| High | CVE-2026-40978 | Spring AI: SQL Injection | 8.8 | |
| High | CVE-2026-22742 | Server-Side Request Forgery in BedrockProxyChatModel via Unvalidated Media URL Fetching | 8.6 | |
| Medium | CVE-2026-59294 | Arbitrary File Write via Path Traversal in ResourceCacheService | 5.9 | |
| High | CVE-2026-47835 | Spring AI: Improper Neutralization of Special Elements in Data Query Logic | 7.5 | |
| Medium | CVE-2026-41863 | Spring AI: Path Traversal | 6.5 | |
| Critical | CVE-2026-59318 | Spring AI: Incorrect Authorization | 6.5 | |
| High | CVE-2026-22744 | Spring AI: Injection | 7.5 | |
| High | CVE-2026-22743 | Server-Side Request Forgery via Filter Expression Keys in Neo4jVectorStore | 7.5 | |
| Medium | CVE-2026-40980 | Spring AI: Uncontrolled Resource Consumption | 6.5 | |
| Medium | CVE-2026-59319 | RediSearch Tag Injection in RedisChatMemoryRepository Allows Cross-Conversation Data Exposure | 4.3 | |
| Medium | CVE-2026-40979 | Spring AI: Insecure Temporary File | 6.1 | |
| Medium | CVE-2026-59308 | Semantic Cache Cross-Tenant Isolation Bypass via SHA-256 Truncation | 4.2 |
News
- Human oversight is still critical as AI patching tools miss security riskscsoonline,
- Frontier LLMs Generate Flawed Patchessans-newsbites-mail,