CVE-2026-59319

Spring AI 2.0.0 is affected by a RediSearch tag injection in RedisChatMemoryRepository.findByMetadata(). The method builds RediSearch tag and text queries from caller-supplied metadata values without applying RediSearchUtil.escape(), unlike sibling methods (get(), clear(), findByTimeRange()) that...

EUVD-2026-67200

RedisChatMemoryRepository.findByMetadata builds RediSearch tag and text queries from caller-supplied metadata values without applying RediSearchUtil.escape, unlike get, clear, and findByTimeRange in the same class which do escape their inputs. An application that passes user-controlled values to...