https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:38:27.268299+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-04970 bdu:2026-04970 2026-10-04T08:38:27.333200+00:00 bdu:2026-04970 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0305 certfr-2026-avi-0305 — De multiples vulnérabilités ont été découvertes dans Spring AI. Elles permettent à un attaquant de provoquer une inject… 2026-10-04T08:38:27.333244+00:00 certfr-2026-avi-0305 https://cve.radiocsirt.org/vuln/euvd-2026-276541 EUVD-2026-276541 2026-10-04T08:38:27.333263+00:00 EUVD-2026-276541 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22730 fkie_cve-2026-22730 2026-10-04T08:38:27.333275+00:00

A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass metadata-based access controls and execute arbitrary SQL commands.

The vulnerability exists due to missing input sanitization.

 https://cve.radiocsirt.org/vuln/ghsa-c267-rfvc-mvpm GHSA-c267-rfvc-mvpm — SQL Injection in Spring AI MariaDBFilterExpressionConverter 2026-10-04T08:38:27.333307+00:00

Affected: Maven: org.springframework.ai:spring-ai-mariadb-store

A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass metadata-based access controls and execute arbitrary SQL commands.

The vulnerability exists due to missing input sanitization.