com.github.yamingd.argo:argo-web (>=2.5.0, <=3.0.1), io.snappydata:gemfire-web (>=1.5.0-beta, <=2.0-beta) +29 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (3.2.12.release)

org.springframework:spring-webmvc MAVEN version 3.2.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.yamingd.argo:argo-web =2.5.0, =1.5.0-beta, =3.1.9-ga, =3.1.9-ga, =3.1.9-g...

Arbitrary Query Execution

Spring AI Vector Stores are vulnerable to Arbitrary Query Execution. The vulnerability is due to insufficient sanitization of special characters in vector store queries, allowing attackers to inject and execute arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB...

This Week in Spring - August 11th, 2026

Hi, Spring fans! Welcome back to another lively edition of This Week in Spring! So much is always happening in the Spring world, and that’s part of what makes it so fun to follow. One of my favorite things is how much the community contributes and how great it is to connect with everyone. In earl...

A Bootiful Podcast: Data guru Gregory Green on RabbitMQ, Valkey, Gemfire, Data Flow, and more

Hi, Spring and data fans! Want a faster, smarter data stack? Tune into this episode with Gregory Green for a deep dive into GemFire, RabbitMQ Streams, Dataflow, and more. We cover real-time event processing, active-active consistency, full-text search, vector search, and how to build resilient,...

EUVD-2026-36796

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0...

GHSA-CMWH-W62W-R2MF Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0...

org.springframework.ai:spring-ai-starter-vector-store-gemfire (>=1.0.0, <=1.0.8) potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-gemfire-store (>=1.0.0, <=1.0.8)

org.springframework.ai:spring-ai-gemfire-store MAVEN version =1.0.0, =1.0.0, =1.0.8 Source cves: CVE-2026-47835 Source advisory: OSV:GHSA-CMWH-W62W-R2MF...

org.springframework.ai:spring-ai-starter-vector-store-gemfire (>=1.1.0, <=1.1.7) potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-gemfire-store (>=1.1.0, <=1.1.7)

org.springframework.ai:spring-ai-gemfire-store MAVEN version =1.1.0, =1.1.0, =1.1.7 Source cves: CVE-2026-47835 Source advisory: OSV:GHSA-CMWH-W62W-R2MF...

org.springframework.ai:spring-ai-starter-vector-store-gemfire (>=1.0.0, <=1.0.8) potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-gemfire-store (>=1.0.0, <=1.0.8)

org.springframework.ai:spring-ai-gemfire-store MAVEN version =1.0.0, =1.0.0, =1.0.8 Source cves: CVE-2026-47835 Source advisory: GHSA-CMWH-W62W-R2MF...

org.springframework.ai:spring-ai-starter-vector-store-gemfire (>=1.1.0, <=1.1.7) potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-gemfire-store (>=1.1.0, <=1.1.7)

org.springframework.ai:spring-ai-gemfire-store MAVEN version =1.1.0, =1.1.0, =1.1.7 Source cves: CVE-2026-47835 Source advisory: GHSA-CMWH-W62W-R2MF...

Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0...

CVE-2026-47835

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0...

CVE-2026-47835 Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0...

CVE-2026-47835

In Spring AI Vector Stores, the vulnerability arises from improper handling of special characters that could lead to arbitrary query execution in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components are spring-ai-elasticsearch-store, spring-ai-opensearch-store, and spring-ai-gemfi...

CVE-2026-47835 Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0...

CVE-2026-47835 Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0...

org.springframework.ai:spring-ai-starter-vector-store-gemfire (>=1.0.0, <=1.0.8) potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-gemfire-store (>=1.0.0, <=1.0.8)

org.springframework.ai:spring-ai-gemfire-store MAVEN version =1.0.0, =1.0.0, =1.0.8 Source cves: CVE-2026-47835 Source advisory: MEND:CVE-2026-47835...

org.springframework.ai:spring-ai-starter-vector-store-gemfire (>=1.1.0, <=1.1.7) potentially affected by CVE-2026-47835 via org.springframework.ai:spring-ai-gemfire-store (>=1.1.0, <=1.1.7)

org.springframework.ai:spring-ai-gemfire-store MAVEN version =1.1.0, =1.1.0, =1.1.7 Source cves: CVE-2026-47835 Source advisory: MEND:CVE-2026-47835...

PT-2026-49305

Name of the Vulnerable Software and Affected Versions Spring AI versions prior to 1.0.9 Spring AI versions prior to 1.1.8 Description Special characters can be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. This issue affects the...

CVE-2026-47835: Improper Neutralization of Special Elements in Data Query Logic

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0...