cn.echoparrot:echoparrot-application (25.4.0), cn.echoparrot:echoparrot-core (>=25.4.0, <=25.4.4) +2 more potentially affected by CVE-2026-22743 via org.springframework.ai:spring-ai-neo4j-store (>=1.1.0-m1, <=1.1.3)

org.springframework.ai:spring-ai-neo4j-store MAVEN version =1.1.0-m1, =25.4.0, =1.1.0-m1, =1.1.3 - org.vrspace:server 0.8.7 Source cves: CVE-2026-22743 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-15791530...

io.gitee.yeshizhe:echoparrot-application (25.2.5), io.gitee.yeshizhe:echoparrot-core (25.2.5) +2 more potentially affected by CVE-2026-22743 via org.springframework.ai:spring-ai-neo4j-store (>=1.0.0-m5, <=1.0.4)

org.springframework.ai:spring-ai-neo4j-store MAVEN version =1.0.0-m5, =1.0.0-m5, =1.0.0-m7, =1.0.4 Source cves: CVE-2026-22743 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-15791530...

io.gitee.yeshizhe:echoparrot-application (25.2.5), io.gitee.yeshizhe:echoparrot-core (25.2.5) +2 more potentially affected by CVE-2026-22743 via org.springframework.ai:spring-ai-neo4j-store (>=1.0.0-m5, <=1.0.4)

org.springframework.ai:spring-ai-neo4j-store MAVEN version =1.0.0-m5, =1.0.0-m5, =1.0.0-m7, =1.0.4 Source cves: CVE-2026-22743 Source advisory: GHSA-7CJ7-RCW6-P68V...

io.gitee.yeshizhe:echoparrot-application (25.2.5), io.gitee.yeshizhe:echoparrot-core (25.2.5) +2 more potentially affected by CVE-2026-22743 via org.springframework.ai:spring-ai-neo4j-store (>=1.0.0-m5, <=1.0.4)

org.springframework.ai:spring-ai-neo4j-store MAVEN version =1.0.0-m5, =1.0.0-m5, =1.0.0-m7, =1.0.4 Source cves: CVE-2026-22743 Source advisory: OSV:GHSA-7CJ7-RCW6-P68V...

cn.echoparrot:echoparrot-application (25.4.0), cn.echoparrot:echoparrot-core (>=25.4.0, <=25.4.4) +2 more potentially affected by CVE-2026-22743 via org.springframework.ai:spring-ai-neo4j-store (>=1.1.0-m1, <=1.1.3)

org.springframework.ai:spring-ai-neo4j-store MAVEN version =1.1.0-m1, =25.4.0, =1.1.0-m1, =1.1.3 - org.vrspace:server 0.8.7 Source cves: CVE-2026-22743 Source advisory: OSV:GHSA-7CJ7-RCW6-P68V...

GHSA-7CJ7-RCW6-P68V Spring AI has a Cypher Injection vulnerability in Neo4jVectorFilterExpressionConverter

Spring AI's spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVectorFilterExpressionConverter. When a user-controlled string is passed as a filter expression key in Neo4jVectorFilterExpressionConverter of spring-ai-neo4j-store, doKey embeds the key into a backtick-delimited...

cn.echoparrot:echoparrot-application (25.4.0), cn.echoparrot:echoparrot-core (>=25.4.0, <=25.4.4) +2 more potentially affected by CVE-2026-22743 via org.springframework.ai:spring-ai-neo4j-store (>=1.1.0-m1, <=1.1.3)

org.springframework.ai:spring-ai-neo4j-store MAVEN version =1.1.0-m1, =25.4.0, =1.1.0-m1, =1.1.3 - org.vrspace:server 0.8.7 Source cves: CVE-2026-22743 Source advisory: GHSA-7CJ7-RCW6-P68V...

EUVD-2026-16539

Spring AI's spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVectorFilterExpressionConverter. When a user-controlled string is passed as a filter expression key in Neo4jVectorFilterExpressionConverter of spring-ai-neo4j-store, doKey embeds the key into a backtick-delimited...

CVE-2026-22743

Spring AI's spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVectorFilterExpressionConverter. When a user-controlled string is passed as a filter expression key in Neo4jVectorFilterExpressionConverter of spring-ai-neo4j-store, doKey embeds the key into a backtick-delimited...

cn.echoparrot:echoparrot-application (25.4.0), cn.echoparrot:echoparrot-core (>=25.4.0, <=25.4.4) +2 more potentially affected by CVE-2026-22743 via org.springframework.ai:spring-ai-neo4j-store (>=1.1.0-m1, <=1.1.3)

org.springframework.ai:spring-ai-neo4j-store MAVEN version =1.1.0-m1, =25.4.0, =1.1.0-m1, =1.1.3 - org.vrspace:server 0.8.7 Source cves: CVE-2026-22743 Source advisory: MEND:CVE-2026-22743...

io.gitee.yeshizhe:echoparrot-application (25.2.5), io.gitee.yeshizhe:echoparrot-core (25.2.5) +2 more potentially affected by CVE-2026-22743 via org.springframework.ai:spring-ai-neo4j-store (>=1.0.0-m5, <=1.0.4)

org.springframework.ai:spring-ai-neo4j-store MAVEN version =1.0.0-m5, =1.0.0-m5, =1.0.0-m7, =1.0.4 Source cves: CVE-2026-22743 Source advisory: MEND:CVE-2026-22743...

CVE-2026-22743

Spring AI's spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVectorFilterExpressionConverter. When a user-controlled string is passed as a filter expression key in Neo4jVectorFilterExpressionConverter of spring-ai-neo4j-store, doKey embeds the key into a backtick-delimited...

CVE-2026-22743: Improper Neutralization of Special Elements used in an SQL Command

Spring AI's spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVectorFilterExpressionConverter. When a user-controlled string is passed as a filter expression key in Neo4jVectorFilterExpressionConverter of spring-ai-neo4j-store, doKey embeds the key into a backtick-delimited...

Server-Side Request Forgery via Filter Expression Keys in Neo4jVectorStore

spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVectorFilterExpressionConverter . When a user-controlled string is passed as a filter expression key in Neo4jVectorFilterExpressionConverter of spring-ai-neo4j-store , doKey embeds the key into a backtick-delimited Cypher...