CVE-2026-47835

In Spring AI Vector Stores, the vulnerability arises from improper handling of special characters that could lead to arbitrary query execution in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components are spring-ai-elasticsearch-store, spring-ai-opensearch-store, and spring-ai-gemfi...

CVE-2026-47835 Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0...

CVE-2026-47835 Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0...

CVE-2026-47835 Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0...

PT-2026-49305

Name of the Vulnerable Software and Affected Versions Spring AI versions prior to 1.0.9 Spring AI versions prior to 1.1.8 Description Special characters can be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. This issue affects the...

cve-2026-47835 - HIGH - Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores

cve-2026-47835 - HIGH - Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores...

GHSA-HFXV-24RG-XRQF vulnerabilities

Vulnerabilities for packages: nextcloud-server, kubeflow-katib...

CVE-2026-44495 vulnerabilities

Vulnerabilities for packages: nextcloud-server, kubeflow-katib...

CVE-2026-44487 vulnerabilities

Vulnerabilities for packages: nextcloud-server, kubeflow-katib...

GHSA-777C-7FJR-54VF vulnerabilities

Vulnerabilities for packages: nextcloud-server, kubeflow-katib...

GHSA-P92Q-9VQR-4J8V vulnerabilities

Vulnerabilities for packages: nextcloud-server, kubeflow-katib...

GHSA-3G43-6GMG-66JW vulnerabilities

Vulnerabilities for packages: nextcloud-server, kubeflow-katib...

CVE-2026-44496 vulnerabilities

Vulnerabilities for packages: nextcloud-server, kubeflow-katib...

CVE-2026-44488 vulnerabilities

Vulnerabilities for packages: nextcloud-server, kubeflow-katib...

CVE-2026-44486 vulnerabilities

Vulnerabilities for packages: nextcloud-server, kubeflow-katib...

GHSA-J5F8-GRM9-P9FC vulnerabilities

Vulnerabilities for packages: nextcloud-server, kubeflow-katib...

CVE-2026-44486 vulnerabilities

Vulnerabilities for packages: nextcloud-server, awx, wazuh-dashboard, gitlab-rails-ce-fips, opensearch-dashboards, wazuh-dashboard-fips, gitlab-rails-ce, opensearch-dashboards-fips, kubeflow-katib...

GHSA-P92Q-9VQR-4J8V vulnerabilities

Vulnerabilities for packages: nextcloud-server, awx, wazuh-dashboard, gitlab-rails-ce-fips, opensearch-dashboards, wazuh-dashboard-fips, gitlab-rails-ce, opensearch-dashboards-fips, kubeflow-katib...

GHSA-HFXV-24RG-XRQF vulnerabilities

Vulnerabilities for packages: nextcloud-server, awx, wazuh-dashboard, gitlab-rails-ce-fips, opensearch-dashboards, wazuh-dashboard-fips, gitlab-rails-ce, opensearch-dashboards-fips, kubeflow-katib...

CVE-2026-44496 vulnerabilities

Vulnerabilities for packages: nextcloud-server, awx, wazuh-dashboard, gitlab-rails-ce-fips, opensearch-dashboards, wazuh-dashboard-fips, gitlab-rails-ce, opensearch-dashboards-fips, kubeflow-katib...