ai.driftkit:driftkit-vector-spring-ai (>=0.6.0, <=0.9.2), ai.driftkit:driftkit-vector-spring-ai-starter (>=0.6.0, <=0.9.2) +195 more potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-vector-store (>=1.0.0, <=1.0.8)

org.springframework.ai:spring-ai-vector-store MAVEN version =1.0.0, =0.6.0, =0.6.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =1.0.29 - com.alibaba.cloud.ai.autoconfigure.memory.long:spring-ai-alibaba-autoconfigure-memory-long 1.0.0.4 -...

org.springframework.ai:spring-ai-starter-vector-store-gemfire (>=1.0.0, <=1.0.8) potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-gemfire-store (>=1.0.0, <=1.0.8)

org.springframework.ai:spring-ai-gemfire-store MAVEN version =1.0.0, =1.0.0, =1.0.8 Source cves: CVE-2026-47835 Source advisory: MEND:CVE-2026-47835...

org.springframework.ai:spring-ai-starter-vector-store-gemfire (>=1.1.0, <=1.1.7) potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-gemfire-store (>=1.1.0, <=1.1.7)

org.springframework.ai:spring-ai-gemfire-store MAVEN version =1.1.0, =1.1.0, =1.1.7 Source cves: CVE-2026-47835 Source advisory: MEND:CVE-2026-47835...

com.alibaba.cloud.ai:spring-ai-alibaba-studio-server-admin (1.0.0.4), com.alibaba.cloud.ai:spring-ai-alibaba-studio-server-core (1.0.0.4) +2 more potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-elasticsearch-store (>=1.0.0, <=1.0.8)

org.springframework.ai:spring-ai-elasticsearch-store MAVEN version =1.0.0, =1.0.0, =1.0.8 Source cves: CVE-2026-47835 Source advisory: MEND:CVE-2026-47835...

XXE Injection

Spring REST Docs is vulnerable to XML External Entity XXE Injection. The vulnerability is due to unsafe processing of XML content when documenting remote APIs, where a compromised or malicious API can supply crafted XML containing external entities. When documentation-generating tests are execute...

PT-2026-49304

Name of the Vulnerable Software and Affected Versions Spring Cloud Sleuth versions 3.1.0 through 3.1.13 Description A denial-of-service DoS condition can be triggered when a user provides specially crafted calls. This occurs in applications using the...

CVE-2026-47825: Origin Validation Error

Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies in certain configuration scenarios. This affects both the WebMVC and WebFlux Gateway Servers. Affected versions: Spring Cloud Gateway 3.1.x fix 3.1.13. Spring Cloud Gateway 4.1.x fix 4.1.13. Spri...

Tool Calling in Spring AI 2.0: A Composable, Agentic Architecture

Tool calling — the ability for an AI model to invoke application-defined functions and act on the results — is the essential building block of agentic AI systems. A model that can discover information, take action, and loop until a goal is reached is an agent. Spring AI 2.0 rearchitects tool...

CVE-2026-41708: Uncontrolled Resource Consumption

In Spring Cloud Sleuth, it is possible for a user to provide specially crafted calls that may cause a denial-of-service DoS condition. The application is vulnerable when it uses a vulnerable version of org.springframework.cloud:spring-cloud-sleuth-instrumentation and Spring TX instrumentation is...

CVE-2026-47835: Improper Neutralization of Special Elements in Data Query Logic

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0...

Unsafe Deserialization

Spring for Apache Kafka is vulnerable to an unsafe deserialization. The vulnerability is due to improper trusted-package matching in JsonKafkaHeaderMapper and the deprecated DefaultKafkaHeaderMapper, where prefix-based checks implicitly trusted subpackages and, combined with Jackson's default bea...

Improper Authorization org.springframework.security:spring-security-core Dependency in Crucible Data Center and Server

This High severity Improper Authorization vulnerability was introduced in version 4.9.0 of Crucible Server. This Improper Authorization vulnerability, with a CVSS Score of 8.2 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N allows an unauthenticated attacker to gain unintended...

CVE-2026-41843

A flaw was found in Spring Framework. Specifically, Spring MVC and WebFlux applications are vulnerable to a Path Traversal attack. This vulnerability allows a remote attacker to access sensitive files or directories on the server by manipulating requests for static resources. The successful...

com.github.arucard21.simplyrestful:deploy-jetty-cxf (>=0.17.4, <=0.18.2), com.github.arucard21.simplyrestful:deploy-springboot-cxf (>=0.17.4, <=0.18.2) +353 more potentially affected by CVE-2026-49875 via org.apache.cxf:cxf-core (3.4.4)

org.apache.cxf:cxf-core MAVEN version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-core and may be impacted: - com.github.arucard21.simplyrestful:deploy-jetty-cxf =0.17.4, =0.17.4, =4.9.2, =4.9.2, =4.0.0-beta.1, =4.1.0 -...

cve-2026-47835 - HIGH - Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores

cve-2026-47835 - HIGH - Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores...

Spring Framework 6.2.x < 6.2.18.1 / 7.0.x < 7.0.7.1 SSRF

The version of Spring Framework installed on the remote host is 6.2.x prior to 6.2.18.1, or 7.0.x prior to 7.0.7.1. It is, therefore, affected by a vulnerability: - Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally provided URL strin...

Linux Distros Unpatched Vulnerability : CVE-2026-40994

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wss4jSecurityInterceptor initialized its BSP WS-I Basic Security Profile compliance flag so that inbound validation disabled WSS4J BSP enforcement on RequestDat...

ai.koog:koog-spring-ai-starter-vector-store (>=0.8.0-rc-1, <=1.3.0-beta), ai.telosforge:kimaira-starter-agentic (>=1.2.4, <=1.2.6) +307 more potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-vector-store (>=1.1.0-m1, <=1.1.7)

org.springframework.ai:spring-ai-vector-store MAVEN version =1.1.0-m1, =0.8.0-rc-1, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =25.4.0, =1.21.2, =0.1.0, =0.3.0, =1.1.0.0-m4, =1.1.0.0-m3, =1.1.2.4-security-fix and more Source cves: CVE-2026-47835 Source advisory:...

ai.driftkit:driftkit-vector-spring-ai (>=0.6.0, <=0.9.2), ai.driftkit:driftkit-vector-spring-ai-starter (>=0.6.0, <=0.9.2) +198 more potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-vector-store (>=1.0.0-m7, <=1.0.8)

org.springframework.ai:spring-ai-vector-store MAVEN version =1.0.0-m7, =0.6.0, =0.6.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =1.0.29 - com.alibaba.cloud.ai.autoconfigure.memory.long:spring-ai-alibaba-autoconfigure-memory-long 1.0.0.4 -...

Improper Neutralization of Special Elements in Data Query Logic

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Data Query Logic via insufficient neutralization of special characters in the query construction. An attacker can execute arbitrary queries against Elasticsearch, OpenSearch, or GemFire...