https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T02:46:00.556469+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0751 certfr-2026-avi-0751 — Une vulnérabilité a été découverte dans Spring AI. Elle permet à un attaquant de provoquer une injection SQL (SQLi) et… 2026-10-06T02:46:00.602274+00:00 certfr-2026-avi-0751 https://cve.radiocsirt.org/vuln/euvd-2026-327401 EUVD-2026-327401 2026-10-06T02:46:00.602327+00:00 EUVD-2026-327401 https://cve.radiocsirt.org/vuln/fkie_cve-2026-47835 fkie_cve-2026-47835 2026-10-06T02:46:00.602349+00:00

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store.

Affected versions: Spring AI 1.0.0 through 1.0.x (fix 1.0.9). Spring AI 1.1.0 through 1.1.x (fix 1.1.8).

 https://cve.radiocsirt.org/vuln/ghsa-cmwh-w62w-r2mf GHSA-cmwh-w62w-r2mf — Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector… 2026-10-06T02:46:00.602399+00:00

Affected: Maven: org.springframework.ai:spring-ai-opensearch-store, Maven: org.springframework.ai:spring-ai-elasticsearch-store, Maven: org.springframework.ai:spring-ai-gemfire-store

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store.

Affected versions: Spring AI 1.0.0 through 1.0.x (fix 1.0.9). Spring AI 1.1.0 through 1.1.x (fix 1.1.8).