org.springframework.ai:spring-ai-starter-vector-store-milvus (>=1.0.0, <=1.0.6), plus.hiver:hiver-module-ai (1.0.9) potentially affected by CVE-2026-41705 via org.springframework.ai:spring-ai-milvus-store (>=1.0.0, <=1.0.6)

org.springframework.ai:spring-ai-milvus-store MAVEN version =1.0.0, =1.0.0, =1.0.6 - plus.hiver:hiver-module-ai 1.0.9 Source cves: CVE-2026-41705 Source advisory: MEND:CVE-2026-41705...

io.github.aigoodle:agent-start-store-milvus (0.1.0), org.springframework.ai:spring-ai-starter-vector-store-milvus (>=1.1.0, <=1.1.5) potentially affected by CVE-2026-41705 via org.springframework.ai:spring-ai-milvus-store (>=1.1.0, <=1.1.5)

org.springframework.ai:spring-ai-milvus-store MAVEN version =1.1.0, =1.1.0, =1.1.5 Source cves: CVE-2026-41705 Source advisory: MEND:CVE-2026-41705...

org.springframework.ai:spring-ai-starter-vector-store-typesense (>=1.0.0, <=1.0.6) potentially affected by CVE-2026-41705 via org.springframework.ai:spring-ai-typesense-store (>=1.0.0, <=1.0.6)

org.springframework.ai:spring-ai-typesense-store MAVEN version =1.0.0, =1.0.0, =1.0.6 Source cves: CVE-2026-41705 Source advisory: MEND:CVE-2026-41705...

CVE-2026-41705: Improper Neutralization of Special Elements used in an Expression Language Statement

Spring AI's MilvusVectorStoredoDeleteList implementation is vulnerable to filter-expression injection via unsanitized document IDs. Spring AI 1.0.x: affected from 1.0.0 through latest 1.0.x; upgrade to 1.0.7 or greater. Spring AI 1.1.x: affected from 1.1.0 through latest 1.1.x; upgrade to 1.1.6 o...

PT-2026-39225

Name of the Vulnerable Software and Affected Versions Spring AI versions 1.0.0 through 1.0.6 Spring AI versions 1.1.0 through 1.1.5 Description The doDeleteList function in the MilvusVectorStore implementation is susceptible to filter-expression injection. This occurs because document IDs are not...

ai.driftkit:driftkit-clients-spring-ai (>=0.6.0, <=0.9.2), ai.driftkit:driftkit-clients-spring-ai-starter (>=0.6.0, <=0.9.2) +344 more potentially affected by CVE-2026-41713 via org.springframework.ai:spring-ai-client-chat (>=1.0.0-m7, <=1.0.6)

org.springframework.ai:spring-ai-client-chat MAVEN version =1.0.0-m7, =0.6.0, =0.6.0, =0.6.0, =0.6.0, =0.6.0, =0.7.0, =0.6.0, =0.6.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28 - ai.intelliswarm:swarmai-rag 1.0.28 and more Source cves: CVE-2026-41713 Source advisory:...

ai.driftkit:driftkit-clients-spring-ai (>=0.6.0, <=0.9.2), ai.driftkit:driftkit-context-engineering-spring-ai (>=0.6.0, <=0.9.2) +116 more potentially affected by CVE-2026-41712 via org.springframework.ai:spring-ai-openai (>=1.0.0-m5, <=1.0.6)

org.springframework.ai:spring-ai-openai MAVEN version =1.0.0-m5, =0.6.0, =0.6.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.0, =1.0.0, =1.0.28 - app.valuationcontrol:library 0.5.9 - com.alibaba.cloud.ai:spring-ai-alibaba-agent-nacos 1.0.0.4 -...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +354 more potentially affected by CVE-2026-41712 via org.springframework.ai:spring-ai-client-chat (>=1.1.0-m1, <=1.1.5)

org.springframework.ai:spring-ai-client-chat MAVEN version =1.1.0-m1, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =0.6.0, =1.1.0-m1.001, =1.1.0-m1.001, =1.1.0-m1.001, =1.1.4 and more Source cves: CVE-2026-41712 Source advisory:...

ai.driftkit:driftkit-clients-spring-ai (>=0.6.0, <=0.9.2), ai.driftkit:driftkit-clients-spring-ai-starter (>=0.6.0, <=0.9.2) +492 more potentially affected by CVE-2026-41713 via org.springframework.ai:spring-ai-model (>=1.0.0-m7, <=1.0.6)

org.springframework.ai:spring-ai-model MAVEN version =1.0.0-m7, =0.6.0, =0.6.0, =0.6.0, =0.6.0, =0.6.0, =0.7.0, =0.6.0, =0.6.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28 - ai.intelliswarm:swarmai-rag 1.0.28 and more Source cves: CVE-2026-41713 Source advisory:...

org.jetos.app:jet-privacy (>=0.0.1, <=0.0.2), org.springframework.ai:spring-ai-milvus-store-spring-boot-starter (>=1.0.0-m5, <=1.0.0-m6) +3 more potentially affected by CVE-2026-41705 via org.springframework.ai:spring-ai-milvus-store (>=1.0.0-m5, <=1.0.6)

org.springframework.ai:spring-ai-milvus-store MAVEN version =1.0.0-m5, =0.0.1, =1.0.0-m5, =1.0.0-m7, =1.3.0, =1.3.8 Source cves: CVE-2026-41705 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-16624640...

org.springframework.ai:spring-ai-starter-vector-store-typesense (>=1.0.0-m7, <=1.0.6), org.springframework.ai:spring-ai-typesense-store-spring-boot-starter (>=1.0.0-m5, <=1.0.0-m6) potentially affected by CVE-2026-41705 via org.springframework.ai:spring-ai-typesense-store (>=1.0.0-m5, <=1.0.6)

org.springframework.ai:spring-ai-typesense-store MAVEN version =1.0.0-m5, =1.0.0-m7, =1.0.0-m5, =1.0.0-m6 Source cves: CVE-2026-41705 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-16624641...

org.springframework.ai:spring-ai-starter-vector-store-typesense (>=1.1.0-m1, <=1.1.5) potentially affected by CVE-2026-41705 via org.springframework.ai:spring-ai-typesense-store (>=1.1.0-m1, <=1.1.5)

org.springframework.ai:spring-ai-typesense-store MAVEN version =1.1.0-m1, =1.1.0-m1, =1.1.5 Source cves: CVE-2026-41705 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-16624641...

com.alibaba.cloud.ai:spring-ai-alibaba-starter-memory (>=1.0.0.1, <=1.0.0.4), com.alibaba.cloud.ai:spring-ai-alibaba-starter-memory-jdbc (>=1.0.0.1, <=1.0.0.4) +2 more potentially affected by CVE-2026-41713 via org.springframework.ai:spring-ai-model-chat-memory-repository-jdbc (>=1.0.0-rc1, <=1.0.6)

org.springframework.ai:spring-ai-model-chat-memory-repository-jdbc MAVEN version =1.0.0-rc1, =1.0.0.1, =1.0.0.1, =1.0.0-rc1, =1.0.0-rc1, =1.0.6 Source cves: CVE-2026-41713 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-16624615...

io.github.aigoodle:agent-start-store-milvus (0.1.0), org.springframework.ai:spring-ai-starter-vector-store-milvus (>=1.1.0-m1, <=1.1.5) potentially affected by CVE-2026-41705 via org.springframework.ai:spring-ai-milvus-store (>=1.1.0-m1, <=1.1.5)

org.springframework.ai:spring-ai-milvus-store MAVEN version =1.1.0-m1, =1.1.0-m1, =1.1.5 Source cves: CVE-2026-41705 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-16624640...

ai.telosforge:kimaira-starter-agentic (>=1.2.4, <=1.2.6), ai.telosforge:kimaira-starter-agentic-factory (>=1.2.4, <=1.2.6) +17 more potentially affected by CVE-2026-41713 via org.springframework.ai:spring-ai-model-chat-memory-repository-jdbc (>=1.1.0-m1, <=1.1.5)

org.springframework.ai:spring-ai-model-chat-memory-repository-jdbc MAVEN version =1.1.0-m1, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.1.0.0-m3, =1.1.0.0-m3, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.1.19, =1.1.20 and more Source cves: CVE-2026-41713 Source advisory:...

com.alibaba.cloud.ai.autoconfigure.memory.long:spring-ai-alibaba-autoconfigure-memory-long (1.0.0.4), com.alibaba.cloud.ai:spring-ai-alibaba-starter-memory-long (1.0.0.4) +3 more potentially affected by CVE-2026-41713 via org.springframework.ai:spring-ai-advisors-vector-store (>=1.0.0, <=1.0.1)

org.springframework.ai:spring-ai-advisors-vector-store MAVEN version =1.0.0, =1.0.0.1, =1.0.0.3-20260305-cve - com.alibaba.cloud.ai:spring-ai-alibaba-studio-client 1.0.0.4 Source cves: CVE-2026-41713 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-16624616...

ai.driftkit:driftkit-clients-spring-ai (>=0.6.0, <=0.9.2), ai.driftkit:driftkit-clients-spring-ai-starter (>=0.6.0, <=0.9.2) +344 more potentially affected by CVE-2026-41712 via org.springframework.ai:spring-ai-client-chat (>=1.0.0-m7, <=1.0.6)

org.springframework.ai:spring-ai-client-chat MAVEN version =1.0.0-m7, =0.6.0, =0.6.0, =0.6.0, =0.6.0, =0.6.0, =0.7.0, =0.6.0, =0.6.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28 - ai.intelliswarm:swarmai-rag 1.0.28 and more Source cves: CVE-2026-41712 Source advisory:...

Prompt Injection

Overview org.springframework.ai:spring-ai-model is a Core model interfaces and classes for Spring AI Affected versions of this package are vulnerable to Prompt Injection via conversation memory handling in the affected advisor. An attacker can inject crafted input in conversation memory that is...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +104 more potentially affected by CVE-2026-41712 via org.springframework.ai:spring-ai-openai (>=1.1.0-m1, <=1.1.5)

org.springframework.ai:spring-ai-openai MAVEN version =1.1.0-m1, =0.1.0, =0.1.0, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =0.6.0, =1.21.2, =1.1.0.0-rc1, =1.1.0.0-m4, =1.1.2.4-security-fix and more Source cves: CVE-2026-41712 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-16624639...

ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess (>=0.1.0, <=0.2.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +354 more potentially affected by CVE-2026-41713 via org.springframework.ai:spring-ai-client-chat (>=1.1.0-m1, <=1.1.5)

org.springframework.ai:spring-ai-client-chat MAVEN version =1.1.0-m1, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =0.6.0, =1.1.0-m1.001, =1.1.0-m1.001, =1.1.0-m1.001, =1.1.4 and more Source cves: CVE-2026-41713 Source advisory:...