PT-2026-49305

Name of the Vulnerable Software and Affected Versions Spring AI versions prior to 1.0.9 Spring AI versions prior to 1.1.8 Description Special characters can be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. This issue affects the...

CVE-2026-47835: Improper Neutralization of Special Elements in Data Query Logic

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0...

cve-2026-47835 - HIGH - Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores

cve-2026-47835 - HIGH - Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores...

CVE-2026-44486 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, nextcloud-server...

CVE-2026-44496 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, nextcloud-server...

CVE-2026-44487 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, nextcloud-server...

CVE-2026-44495 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, nextcloud-server...

GHSA-HFXV-24RG-XRQF vulnerabilities

Vulnerabilities for packages: kubeflow-katib, nextcloud-server...

GHSA-J5F8-GRM9-P9FC vulnerabilities

Vulnerabilities for packages: kubeflow-katib, nextcloud-server...

GHSA-777C-7FJR-54VF vulnerabilities

Vulnerabilities for packages: kubeflow-katib, nextcloud-server...

CVE-2026-44488 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, nextcloud-server...

GHSA-3G43-6GMG-66JW vulnerabilities

Vulnerabilities for packages: kubeflow-katib, nextcloud-server...

GHSA-P92Q-9VQR-4J8V vulnerabilities

Vulnerabilities for packages: kubeflow-katib, nextcloud-server...

CVE-2026-44488 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, wazuh-dashboard, wazuh-dashboard-fips, awx, opensearch-dashboards-fips, nextcloud-server, gitlab-rails-ce-fips, opensearch-dashboards, kubeflow-katib...

GHSA-777C-7FJR-54VF vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, wazuh-dashboard, wazuh-dashboard-fips, awx, opensearch-dashboards-fips, nextcloud-server, gitlab-rails-ce-fips, opensearch-dashboards, kubeflow-katib...

CVE-2026-44487 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, wazuh-dashboard, wazuh-dashboard-fips, arangodb, awx, opensearch-dashboards-fips, nextcloud-server, gitlab-rails-ce-fips, opensearch-dashboards, kubeflow-katib...

CVE-2026-44486 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, wazuh-dashboard, wazuh-dashboard-fips, arangodb, awx, opensearch-dashboards-fips, nextcloud-server, gitlab-rails-ce-fips, opensearch-dashboards, kubeflow-katib...

CVE-2026-44496 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, wazuh-dashboard, wazuh-dashboard-fips, arangodb, awx, opensearch-dashboards-fips, nextcloud-server, gitlab-rails-ce-fips, opensearch-dashboards, kubeflow-katib...

GHSA-P92Q-9VQR-4J8V vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, wazuh-dashboard, wazuh-dashboard-fips, arangodb, awx, opensearch-dashboards-fips, nextcloud-server, gitlab-rails-ce-fips, opensearch-dashboards, kubeflow-katib...

GHSA-HFXV-24RG-XRQF vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, wazuh-dashboard, wazuh-dashboard-fips, arangodb, awx, opensearch-dashboards-fips, nextcloud-server, gitlab-rails-ce-fips, opensearch-dashboards, kubeflow-katib...