Lucene search
+L

1332 matches found

vulnersOsv
vulnersOsv
•added 2026/06/15 9:30 p.m.•3 views

org.springframework.ai:spring-ai-starter-vector-store-aws-opensearch (>=1.1.0, <=1.1.7), org.springframework.ai:spring-ai-starter-vector-store-opensearch (>=1.1.0, <=1.1.7) potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-opensearch-store (>=1.1.0, <=1.1.7)

org.springframework.ai:spring-ai-opensearch-store MAVEN version =1.1.0, =1.1.0, =1.1.0, =1.1.7 Source cves: CVE-2026-47835 Source advisory: GHSA-CMWH-W62W-R2MF...

8.6CVSS5.8AI score0.00421EPSS
SaveExploits0
NVD
NVD
•added 2026/06/15 8:16 p.m.•26 views

CVE-2026-47835

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0...

8.6CVSS0.00421EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/15 6:54 p.m.•18 views

CVE-2026-47835 Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0...

8.6CVSS6.1AI score0.00421EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2026/06/15 6:54 p.m.•4 views

org.springframework.ai:spring-ai-starter-vector-store-aws-opensearch (>=1.0.0, <=1.0.8), org.springframework.ai:spring-ai-starter-vector-store-opensearch (>=1.0.0, <=1.0.8) potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-opensearch-store (>=1.0.0, <=1.0.8)

org.springframework.ai:spring-ai-opensearch-store MAVEN version =1.0.0, =1.0.0, =1.0.0, =1.0.8 Source cves: CVE-2026-47835 Source advisory: MEND:CVE-2026-47835...

8.6CVSS5.8AI score0.00421EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/06/15 6:54 p.m.•4 views

org.springframework.ai:spring-ai-starter-vector-store-aws-opensearch (>=1.1.0, <=1.1.7), org.springframework.ai:spring-ai-starter-vector-store-opensearch (>=1.1.0, <=1.1.7) potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-opensearch-store (>=1.1.0, <=1.1.7)

org.springframework.ai:spring-ai-opensearch-store MAVEN version =1.1.0, =1.1.0, =1.1.0, =1.1.7 Source cves: CVE-2026-47835 Source advisory: MEND:CVE-2026-47835...

8.6CVSS5.8AI score0.00421EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/06/15 6:54 p.m.•86 views

CVE-2026-47835 Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0...

8.6CVSS0.00421EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/15 6:54 p.m.•75 views

CVE-2026-47835

In Spring AI Vector Stores, the vulnerability arises from improper handling of special characters that could lead to arbitrary query execution in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components are spring-ai-elasticsearch-store, spring-ai-opensearch-store, and spring-ai-gemfi...

8.6CVSS6.1AI score0.00421EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2026/06/15 6:54 p.m.•19 views

CVE-2026-47835 Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0...

8.6CVSS6.2AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/15 12:00 a.m.•44 views

PT-2026-49305

Name of the Vulnerable Software and Affected Versions Spring AI versions prior to 1.0.9 Spring AI versions prior to 1.1.8 Description Special characters can be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. This issue affects the...

8.6CVSS5.9AI score0.00421EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/15 12:00 a.m.•10 views

CVE-2026-47835: Improper Neutralization of Special Elements in Data Query Logic

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0...

8.6CVSS6.1AI score0.00421EPSS
SaveExploits0References3
Spring Security Advisories
Spring Security Advisories
•added 2026/06/12 12:00 a.m.•37 views

cve-2026-47835 - HIGH - Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores

cve-2026-47835 - HIGH - Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores...

8.6CVSS5.8AI score0.00421EPSS
SaveExploits0
Wolfi
Wolfi
•added 2026/06/11 1:48 a.m.•34 views

CVE-2026-44486 vulnerabilities

Vulnerabilities for packages: nextcloud-server, kubeflow-katib...

7.5CVSS7.6AI score0.0076EPSS
SaveExploits1
Wolfi
Wolfi
•added 2026/06/11 1:48 a.m.•25 views

GHSA-777C-7FJR-54VF vulnerabilities

Vulnerabilities for packages: nextcloud-server, kubeflow-katib...

5.8AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/06/11 1:48 a.m.•32 views

GHSA-HFXV-24RG-XRQF vulnerabilities

Vulnerabilities for packages: nextcloud-server, kubeflow-katib...

5.8AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/06/11 1:48 a.m.•34 views

CVE-2026-44487 vulnerabilities

Vulnerabilities for packages: nextcloud-server, kubeflow-katib...

8.2CVSS7.6AI score0.0076EPSS
SaveExploits1
Wolfi
Wolfi
•added 2026/06/11 1:48 a.m.•39 views

CVE-2026-44488 vulnerabilities

Vulnerabilities for packages: nextcloud-server, kubeflow-katib...

7.5CVSS7.6AI score0.00931EPSS
SaveExploits1
Wolfi
Wolfi
•added 2026/06/11 1:48 a.m.•34 views

CVE-2026-44495 vulnerabilities

Vulnerabilities for packages: nextcloud-server, kubeflow-katib...

7.7CVSS7.6AI score0.01041EPSS
SaveExploits1
Wolfi
Wolfi
•added 2026/06/11 1:48 a.m.•35 views

CVE-2026-44496 vulnerabilities

Vulnerabilities for packages: nextcloud-server, kubeflow-katib...

7.5CVSS7.6AI score0.00966EPSS
SaveExploits1
Wolfi
Wolfi
•added 2026/06/11 1:48 a.m.•19 views

GHSA-3G43-6GMG-66JW vulnerabilities

Vulnerabilities for packages: nextcloud-server, kubeflow-katib...

5.8AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/06/11 1:48 a.m.•24 views

GHSA-J5F8-GRM9-P9FC vulnerabilities

Vulnerabilities for packages: nextcloud-server, kubeflow-katib...

5.8AI score
SaveExploits0
Rows per page
Query Builder