CVE-2026-45249 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, opensearch-dashboards, opensearch-dashboards-fips, kubeflow-katib, gitlab-rails-ce, gitlab-rails-ce-fips, commercial-gitlab-rails-ee-fips...

GHSA-FGMJ-FM8M-JVVX vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, opensearch-dashboards, opensearch-dashboards-fips, kubeflow-katib, gitlab-rails-ce, gitlab-rails-ce-fips, commercial-gitlab-rails-ee-fips...

CVE-2026-45249 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, kubeflow-katib...

GHSA-FGMJ-FM8M-JVVX vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, kubeflow-katib...

CVE-2026-44974 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-36HH-X5P5-JGC8 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-CMWH-PVXP-8882 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, librechat, wazuh-dashboard, opensearch-dashboards-fips, kibana, gitlab-rails-ce, langfuse-fips, langfuse, wazuh-dashboard-fips, gitlab-rails-ce-fips, nextcloud-server...

PT-2026-56046

Уязвимость программного пакета OpenSearch связана с недостаточной защитой служебных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

GHSA-VXR8-FQ34-VVX9 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, librechat, wazuh-dashboard, kibana, gitlab-rails-ce, langfuse-fips, langfuse, wazuh-dashboard-fips, gitlab-rails-ce-fips, nextcloud-server...

GHSA-7C78-JF6Q-G5CM vulnerabilities

Vulnerabilities for packages: authentik-fips, opensearch-dashboards, wazuh-dashboard, authentik, pulumi, opensearch-dashboards-fips, lerna, arangodb, prism, saf, wazuh-dashboard-fips, vitess...

CVE-2026-49982 vulnerabilities

Vulnerabilities for packages: authentik-fips, opensearch-dashboards, wazuh-dashboard, authentik, pulumi, opensearch-dashboards-fips, lerna, arangodb, prism, saf, wazuh-dashboard-fips, vitess...

GHSA-VXR8-FQ34-VVX9 vulnerabilities

Vulnerabilities for packages: langfuse, nextcloud-server, opensearch-dashboards...

GHSA-7C78-JF6Q-G5CM vulnerabilities

Vulnerabilities for packages: vitess, saf, opensearch-dashboards, lerna, pulumi, prism...

CVE-2026-49982 vulnerabilities

Vulnerabilities for packages: vitess, saf, opensearch-dashboards, lerna, pulumi, prism...

org.springframework.ai:spring-ai-starter-vector-store-aws-opensearch (>=1.0.0, <=1.0.8), org.springframework.ai:spring-ai-starter-vector-store-opensearch (>=1.0.0, <=1.0.8) potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-opensearch-store (>=1.0.0, <=1.0.8)

org.springframework.ai:spring-ai-opensearch-store MAVEN version =1.0.0, =1.0.0, =1.0.0, =1.0.8 Source cves: CVE-2026-47835 Source advisory: OSV:GHSA-CMWH-W62W-R2MF...

org.springframework.ai:spring-ai-starter-vector-store-aws-opensearch (>=1.1.0, <=1.1.7), org.springframework.ai:spring-ai-starter-vector-store-opensearch (>=1.1.0, <=1.1.7) potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-opensearch-store (>=1.1.0, <=1.1.7)

org.springframework.ai:spring-ai-opensearch-store MAVEN version =1.1.0, =1.1.0, =1.1.0, =1.1.7 Source cves: CVE-2026-47835 Source advisory: OSV:GHSA-CMWH-W62W-R2MF...

GHSA-CMWH-W62W-R2MF Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0...

EUVD-2026-36796

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0...

org.springframework.ai:spring-ai-starter-vector-store-aws-opensearch (>=1.0.0, <=1.0.8), org.springframework.ai:spring-ai-starter-vector-store-opensearch (>=1.0.0, <=1.0.8) potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-opensearch-store (>=1.0.0, <=1.0.8)

org.springframework.ai:spring-ai-opensearch-store MAVEN version =1.0.0, =1.0.0, =1.0.0, =1.0.8 Source cves: CVE-2026-47835 Source advisory: GHSA-CMWH-W62W-R2MF...

Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0...