https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T13:39:34.938449+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0365 certfr-2026-avi-0365 — De multiples vulnérabilités ont été découvertes dans Spring AI. Certaines d'entre elles permettent à un attaquant de pr… 2026-10-08T13:39:34.999769+00:00 certfr-2026-avi-0365 https://cve.radiocsirt.org/vuln/euvd-2026-324030 EUVD-2026-324030 2026-10-08T13:39:34.999815+00:00 EUVD-2026-324030 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22744 fkie_cve-2026-22744 2026-10-08T13:39:34.999831+00:00

In RedisFilterExpressionConverter of spring-ai-redis-store, when a user-controlled string is passed as a filter value for a TAG field, stringValue() inserts the value directly into the @field:{VALUE} RediSearch TAG block without escaping characters.This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.

 https://cve.radiocsirt.org/vuln/ghsa-44f4-gvwj-6qg3 GHSA-44f4-gvwj-6qg3 — Spring AI Redis Store has TAG Field Query Injection Through Improper Neutralization of Special Characters 2026-10-08T13:39:34.999862+00:00

Affected: Maven: org.springframework.ai:spring-ai-redis-store

In RedisFilterExpressionConverter of spring-ai-redis-store, when a user-controlled string is passed as a filter value for a TAG field, stringValue() inserts the value directly into the @field:{VALUE} RediSearch TAG block without escaping characters. This issue affects Spring AI: from 1.0.0 before 1.0.5, from 1.1.0 before 1.1.4.