Lucene search
+L

1 matches found

OSV
OSV
added 2026/04/28 9:34 a.m.15 views

GHSA-63C8-M9M2-CVR3 Spring AI has SQL Injection in CosmosDBVectorStore.doDelete()

SQL injection vulnerability in Spring AI's CosmosDBVectorStore allows attackers to execute arbitrary SQL queries via crafted document IDs. Affected versions: Spring AI: 1.0.0 - 1.0.5 fixed in 1.0.6, 1.1.0 - 1.1.4 fixed in 1.1.5...

8.8CVSS6.1AI score0.00338EPSS
SaveExploits0References3
Rows per page
Query Builder