Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 03:33:03 +0000 certfr-2026-avi-0751 — Une vulnérabilité a été découverte dans Spring AI. Elle permet à un attaquant de provoquer une injection SQL (SQLi) et… https://cve.radiocsirt.org/vuln/certfr-2026-avi-0751 certfr-2026-avi-0751 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0751 EUVD-2026-327401 https://cve.radiocsirt.org/vuln/euvd-2026-327401 EUVD-2026-327401 https://cve.radiocsirt.org/vuln/euvd-2026-327401 fkie_cve-2026-47835 https://cve.radiocsirt.org/vuln/fkie_cve-2026-47835 <p>In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store.</p> <p>Affected versions: Spring AI 1.0.0 through 1.0.x (fix 1.0.9). Spring AI 1.1.0 through 1.1.x (fix 1.1.8).</p> <p>In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store.</p> <p>Affected versions: Spring AI 1.0.0 through 1.0.x (fix 1.0.9). Spring AI 1.1.0 through 1.1.x (fix 1.1.8).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-47835 GHSA-cmwh-w62w-r2mf — Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector… https://cve.radiocsirt.org/vuln/ghsa-cmwh-w62w-r2mf <p><strong>Affected:</strong> Maven: org.springframework.ai:spring-ai-opensearch-store, Maven: org.springframework.ai:spring-ai-elasticsearch-store, Maven: org.springframework.ai:spring-ai-gemfire-store</p> <p>In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store.</p> <p>Affected versions: Spring AI 1.0.0 through 1.0.x (fix 1.0.9). Spring AI 1.1.0 through 1.1.x (fix 1.1.8).</p> <p><strong>Affected:</strong> Maven: org.springframework.ai:spring-ai-opensearch-store, Maven: org.springframework.ai:spring-ai-elasticsearch-store, Maven: org.springframework.ai:spring-ai-gemfire-store</p> <p>In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store.</p> <p>Affected versions: Spring AI 1.0.0 through 1.0.x (fix 1.0.9). Spring AI 1.1.0 through 1.1.x (fix 1.1.8).</p> https://cve.radiocsirt.org/vuln/ghsa-cmwh-w62w-r2mf