Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/27 12:00 a.m.•7 views

CVE-2026-22744: Improper Neutralization of Special Elements in Output Used by a Downstream Component

In RedisFilterExpressionConverter of spring-ai-redis-store, when a user-controlled string is passed as a filter value for a TAG field, stringValue inserts the value directly into the @field:VALUE RediSearch TAG block without escaping characters.This issue affects Spring AI: from 1.0.0 before 1.0....

7.5CVSS5.9AI score0.0025EPSS
SaveExploits0References3
Rows per page
Query Builder