Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF due to insufficient validation of user-supplied media URLs in the BedrockProxyChatModel function. An attacker can cause the server to send HTTP requests to unintended internal or external destinations by...

com.embabel.agent:embabel-agent-bedrock-autoconfigure (0.2.0), com.embabel.agent:embabel-agent-starter-bedrock (0.2.0) +2 more potentially affected by CVE-2026-22742 via org.springframework.ai:spring-ai-bedrock-converse (>=1.0.0-m5, <=1.0.4)

org.springframework.ai:spring-ai-bedrock-converse MAVEN version =1.0.0-m5, =1.0.0-m5, =1.0.0-m7, =1.0.4 Source cves: CVE-2026-22742 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-15791534...

com.embabel.agent:embabel-agent-bedrock-autoconfigure (>=0.3.0, <=0.3.4), com.embabel.agent:embabel-agent-starter-bedrock (>=0.3.0, <=0.3.4) +6 more potentially affected by CVE-2026-22742 via org.springframework.ai:spring-ai-bedrock-converse (>=1.1.0-m1, <=1.1.3)

org.springframework.ai:spring-ai-bedrock-converse MAVEN version =1.1.0-m1, =0.3.0, =0.3.0, =3.4.0, =0.2.0, =.30.0.rc1, =.30.0.rc1, =.30.0.rc1, =1.1.0-m1, =1.1.3 Source cves: CVE-2026-22742 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-15791534...

com.embabel.agent:embabel-agent-bedrock-autoconfigure (0.2.0), com.embabel.agent:embabel-agent-starter-bedrock (0.2.0) +2 more potentially affected by CVE-2026-22742 via org.springframework.ai:spring-ai-autoconfigure-model-bedrock-ai (>=1.0.0-m7, <=1.0.4)

org.springframework.ai:spring-ai-autoconfigure-model-bedrock-ai MAVEN version =1.0.0-m7, =1.0.0-m7, =1.0.0-m7, =1.0.4 Source cves: CVE-2026-22742 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-15791533...

com.embabel.agent:embabel-agent-bedrock-autoconfigure (>=0.3.0, <=0.3.4), com.embabel.agent:embabel-agent-starter-bedrock (>=0.3.0, <=0.3.4) +2 more potentially affected by CVE-2026-22742 via org.springframework.ai:spring-ai-autoconfigure-model-bedrock-ai (>=1.1.0-m1, <=1.1.3)

org.springframework.ai:spring-ai-autoconfigure-model-bedrock-ai MAVEN version =1.1.0-m1, =0.3.0, =0.3.0, =1.1.0-m1, =1.1.0-m1, =1.1.3 Source cves: CVE-2026-22742 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-15791533...

com.embabel.agent:embabel-agent-bedrock-autoconfigure (0.2.0), com.embabel.agent:embabel-agent-starter-bedrock (0.2.0) +2 more potentially affected by CVE-2026-22742 via org.springframework.ai:spring-ai-bedrock-converse (>=1.0.0-m5, <=1.0.4)

org.springframework.ai:spring-ai-bedrock-converse MAVEN version =1.0.0-m5, =1.0.0-m5, =1.0.0-m7, =1.0.4 Source cves: CVE-2026-22742 Source advisory: GHSA-MHRG-94VW-45C5...

com.embabel.agent:embabel-agent-bedrock-autoconfigure (0.2.0), com.embabel.agent:embabel-agent-starter-bedrock (0.2.0) +2 more potentially affected by CVE-2026-22742 via org.springframework.ai:spring-ai-bedrock-converse (>=1.0.0-m5, <=1.0.4)

org.springframework.ai:spring-ai-bedrock-converse MAVEN version =1.0.0-m5, =1.0.0-m5, =1.0.0-m7, =1.0.4 Source cves: CVE-2026-22742 Source advisory: OSV:GHSA-MHRG-94VW-45C5...

com.embabel.agent:embabel-agent-bedrock-autoconfigure (>=0.3.0, <=0.3.4), com.embabel.agent:embabel-agent-starter-bedrock (>=0.3.0, <=0.3.4) +6 more potentially affected by CVE-2026-22742 via org.springframework.ai:spring-ai-bedrock-converse (>=1.1.0-m1, <=1.1.3)

org.springframework.ai:spring-ai-bedrock-converse MAVEN version =1.1.0-m1, =0.3.0, =0.3.0, =3.4.0, =0.2.0, =.30.0.rc1, =.30.0.rc1, =.30.0.rc1, =1.1.0-m1, =1.1.3 Source cves: CVE-2026-22742 Source advisory: OSV:GHSA-MHRG-94VW-45C5...

com.embabel.agent:embabel-agent-bedrock-autoconfigure (>=0.3.0, <=0.3.4), com.embabel.agent:embabel-agent-starter-bedrock (>=0.3.0, <=0.3.4) +6 more potentially affected by CVE-2026-22742 via org.springframework.ai:spring-ai-bedrock-converse (>=1.1.0-m1, <=1.1.3)

org.springframework.ai:spring-ai-bedrock-converse MAVEN version =1.1.0-m1, =0.3.0, =0.3.0, =3.4.0, =0.2.0, =.30.0.rc1, =.30.0.rc1, =.30.0.rc1, =1.1.0-m1, =1.1.3 Source cves: CVE-2026-22742 Source advisory: GHSA-MHRG-94VW-45C5...

CVE-2026-22742

Spring AI's spring-ai-bedrock-converse contains a Server-Side Request Forgery SSRF vulnerability in BedrockProxyChatModel when processing multimodal messages that include user-supplied media URLs. Insufficient validation of those URLs allows an attacker to induce the server to issue HTTP requests...

com.embabel.agent:embabel-agent-bedrock-autoconfigure (>=0.3.0, <=0.3.4), com.embabel.agent:embabel-agent-starter-bedrock (>=0.3.0, <=0.3.4) +6 more potentially affected by CVE-2026-22742 via org.springframework.ai:spring-ai-bedrock-converse (>=1.1.0-m1, <=1.1.3)

org.springframework.ai:spring-ai-bedrock-converse MAVEN version =1.1.0-m1, =0.3.0, =0.3.0, =3.4.0, =0.2.0, =.30.0.rc1, =.30.0.rc1, =.30.0.rc1, =1.1.0-m1, =1.1.3 Source cves: CVE-2026-22742 Source advisory: MEND:CVE-2026-22742...

com.embabel.agent:embabel-agent-bedrock-autoconfigure (0.2.0), com.embabel.agent:embabel-agent-starter-bedrock (0.2.0) +2 more potentially affected by CVE-2026-22742 via org.springframework.ai:spring-ai-bedrock-converse (>=1.0.0-m5, <=1.0.4)

org.springframework.ai:spring-ai-bedrock-converse MAVEN version =1.0.0-m5, =1.0.0-m5, =1.0.0-m7, =1.0.4 Source cves: CVE-2026-22742 Source advisory: MEND:CVE-2026-22742...

PT-2026-28325

Name of the Vulnerable Software and Affected Versions Spring AI versions 1.0.0 through 1.0.4 Spring AI versions 1.1.0 through 1.1.3 Description Spring AI’s spring-ai-bedrock-converse component has a Server-Side Request Forgery SSRF issue within the BedrockProxyChatModel. This occurs when handling...

CVE-2026-22742: Server-Side Request Forgery (SSRF)

Spring AI's spring-ai-bedrock-converse contains a Server-Side Request Forgery SSRF vulnerability in BedrockProxyChatModel when processing multimodal messages that include user-supplied media URLs. Insufficient validation of those URLs allows an attacker to induce the server to issue HTTP requests...