20531 matches found
CVE-2026-41713
A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an unintended way. Applications using the affected advisor with user-controlled input may be susceptible to manipulation of model behavior across conversation turns...
CVE-2026-41713 Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisor
A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an unintended way. Applications using the affected advisor with user-controlled input may be susceptible to manipulation of model behavior across conversation turns...
com.alibaba.cloud.ai:spring-ai-alibaba-starter-memory (>=1.0.0.1, <=1.0.0.4), com.alibaba.cloud.ai:spring-ai-alibaba-starter-memory-jdbc (>=1.0.0.1, <=1.0.0.4) +2 more potentially affected by CVE-2026-41712 via org.springframework.ai:spring-ai-model-chat-memory-repository-jdbc (>=1.0.0, <=1.0.6)
org.springframework.ai:spring-ai-model-chat-memory-repository-jdbc MAVEN version =1.0.0, =1.0.0.1, =1.0.0.1, =1.0.0, =1.0.0, =1.0.6 Source cves: CVE-2026-41712 Source advisory: MEND:CVE-2026-41712...
ai.telosforge:kimaira-starter-agentic (>=1.2.4, <=1.2.6), ai.telosforge:kimaira-starter-agentic-factory (>=1.2.4, <=1.2.6) +17 more potentially affected by CVE-2026-41712 via org.springframework.ai:spring-ai-model-chat-memory-repository-jdbc (>=1.1.0, <=1.1.5)
org.springframework.ai:spring-ai-model-chat-memory-repository-jdbc MAVEN version =1.1.0, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.1.0.0-rc1, =1.1.0.0-rc1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.1.19, =1.1.20 and more Source cves: CVE-2026-41712 Source advisory: MEND:CVE-2026-41712...
com.alibaba.cloud.ai:spring-ai-alibaba-autoconfigure-model-chat-memory-mem0 (2.0.0-m1.1), com.alibaba.cloud.ai:spring-ai-alibaba-model-chat-memory-repository-mem0 (2.0.0-m1.1) +2 more potentially affected by CVE-2026-41712 via org.springframework.ai:spring-ai-advisors-vector-store (>=2.0.0-m1, <=2.0.0-m4)
org.springframework.ai:spring-ai-advisors-vector-store MAVEN version =2.0.0-m1, =0.1.0, =0.1.1 Source cves: CVE-2026-41712 Source advisory: MEND:CVE-2026-41712...
ai.driftkit:driftkit-clients-spring-ai (>=0.6.0, <=0.9.2), ai.driftkit:driftkit-clients-spring-ai-starter (>=0.6.0, <=0.9.2) +492 more potentially affected by CVE-2026-41712 via org.springframework.ai:spring-ai-model (>=1.0.0-m7, <=1.0.6)
org.springframework.ai:spring-ai-model MAVEN version =1.0.0-m7, =0.6.0, =0.6.0, =0.6.0, =0.6.0, =0.6.0, =0.7.0, =0.6.0, =0.6.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28 - ai.intelliswarm:swarmai-rag 1.0.28 and more Source cves: CVE-2026-41712 Source advisory: MEND:CVE-2026-41712...
ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +632 more potentially affected by CVE-2026-41712 via org.springframework.ai:spring-ai-model (>=1.1.0-m1, <=1.1.5)
org.springframework.ai:spring-ai-model MAVEN version =1.1.0-m1, =0.1.0, =0.1.0, =0.8.0-rc-1, =0.7.0, =0.7.0, =0.8.0-rc-1, =1.0.0, =1.0.0, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.6 and more Source cves: CVE-2026-41712 Source advisory: MEND:CVE-2026-41712...
ai.fastllm:agent-bridge_3 (>=0.3.0, <=0.5.7), ai.fastllm:agent-cli_3 (>=0.3.0, <=0.5.7) +387 more potentially affected by CVE-2026-41712 via org.springframework.ai:spring-ai-model (>=2.0.0-m1, <=2.0.0-m5)
org.springframework.ai:spring-ai-model MAVEN version =2.0.0-m1, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.1.0, =0.1.0, =1.21.9, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2026-41712 Source advisory: MEND:CVE-2026-41712...
CVE-2024-54017
CVE-2024-54017 affects SIPROTEC 5 devices (multiple models listed) and is caused by insufficient randomness in session identifiers. This enables an unauthenticated remote attacker to brute-force a session ID and read limited information from the web server without authorization. No exploitation d...
CVE-2026-7482
A flaw was found in Ollama. A remote attacker can exploit a heap out-of-bounds read vulnerability in the GGUF model loader by providing a specially crafted GGUF GGML Unified Format file to the /api/create endpoint. This allows the attacker to read beyond the allocated memory buffer, potentially...
MINI-2326-PCVF-V44Q
Bulletin has no description...
MINI-V863-CM32-G69R
Bulletin has no description...
MINI-R824-5GRJ-GH98
Bulletin has no description...
MINI-PC27-73F6-6P4G
Bulletin has no description...
MINI-M63V-766W-MJG9
Bulletin has no description...
MINI-M4VF-67MH-RXH8
Bulletin has no description...
MINI-JMCP-MHGC-944G
Bulletin has no description...
MINI-HG23-3G85-262V
Bulletin has no description...