Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-59279
Affects org.springframework.ai:mcp-spring-webflux | Versions [2.0.0,2.0.1)
Has fix
MavenPublished 23 Aug 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-59279
Affects org.springframework.ai:mcp-spring-webmvc | Versions [2.0.0,2.0.1)
Has fix
MavenPublished 23 Aug 2026
  • H
Prompt InjectionCVE-2026-41713
Affects org.springframework.ai:spring-ai-advisors-vector-store | Versions [,1.0.7)[1.1.0-M1, 1.1.6)
Has fix
MavenPublished 10 May 2026
  • H
Improper Neutralization of Special Elements in Data Query LogicCVE-2026-40966
Affects org.springframework.ai:spring-ai-advisors-vector-store | Versions [,1.0.6)[1.1.0-M1, 1.1.5)
Has fix
MavenPublished 29 Apr 2026
  • H
Directory TraversalCVE-2026-41863
Affects org.springframework.ai:spring-ai-anthropic | Versions [,1.1.7)
Has fix
MavenPublished 24 May 2026
  • C
Server-side Request Forgery (SSRF)CVE-2026-22742
Affects org.springframework.ai:spring-ai-autoconfigure-model-bedrock-ai | Versions [,1.0.5)[1.1.0-M1,1.1.4)
Has fix
MavenPublished 27 Mar 2026
  • M
Insufficiently Protected CredentialsCVE-2026-40979
Affects org.springframework.ai:spring-ai-autoconfigure-model-transformers | Versions [,1.0.6)[1.1.0-M1, 1.1.5)
Has fix
MavenPublished 28 Apr 2026
  • H
SQL InjectionCVE-2026-40978
Affects org.springframework.ai:spring-ai-azure-cosmos-db-store | Versions [,1.0.6)[1.1.0-M1, 1.1.5)
Has fix
MavenPublished 28 Apr 2026
  • C
Server-side Request Forgery (SSRF)CVE-2026-22742
Affects org.springframework.ai:spring-ai-bedrock-converse | Versions [,1.0.5)[1.1.0-M1,1.1.4)
Has fix
MavenPublished 27 Mar 2026
  • H
Missing AuthorizationCVE-2026-41712
Affects org.springframework.ai:spring-ai-client-chat | Versions [,1.0.7)[1.1.0-M1, 1.1.6)
Has fix
MavenPublished 27 Jul 2026
  • H
Prompt InjectionCVE-2026-41713
Affects org.springframework.ai:spring-ai-client-chat | Versions [,1.0.7)[1.1.0-M1, 1.1.6)
Has fix
MavenPublished 10 May 2026
  • H
Improper Neutralization of Special Elements in Data Query LogicCVE-2026-40967
Affects org.springframework.ai:spring-ai-couchbase-store | Versions [,1.0.6)[1.1.0-M1, 1.1.5)
Has fix
MavenPublished 29 Apr 2026
  • H
Improper Neutralization of Special Elements in Data Query LogicCVE-2026-40967
Affects org.springframework.ai:spring-ai-elasticsearch-store | Versions [,1.0.6)[1.1.0-M1, 1.1.5)
Has fix
MavenPublished 29 Apr 2026
  • H
Improper Neutralization of Special Elements in Data Query LogicCVE-2026-40967
Affects org.springframework.ai:spring-ai-gemfire-store | Versions [,1.0.6)[1.1.0-M1, 1.1.5)
Has fix
MavenPublished 29 Apr 2026
  • H
Improper Neutralization of Special Elements in Data Query LogicCVE-2026-40967
Affects org.springframework.ai:spring-ai-mariadb-store | Versions [,1.0.6)[1.1.0-M1, 1.1.5)
Has fix
MavenPublished 29 Apr 2026
  • H
SQL InjectionCVE-2026-22730
Affects org.springframework.ai:spring-ai-mariadb-store | Versions [1.0.0-M5,1.0.4)[1.1.0-M1,1.1.3)[2.0.0-M1,2.0.0-M3)
Has fix
MavenPublished 18 Mar 2026
  • H
Improper Neutralization of Special Elements in Data Query LogicCVE-2026-41705
Affects org.springframework.ai:spring-ai-milvus-store | Versions [,1.0.7)[1.1.0-M1, 1.1.6)
Has fix
MavenPublished 10 May 2026
  • H
Improper Neutralization of Special Elements in Data Query LogicCVE-2026-40967
Affects org.springframework.ai:spring-ai-milvus-store | Versions [,1.0.6)[1.1.0-M1, 1.1.5)
Has fix
MavenPublished 29 Apr 2026
  • M
Incorrect AuthorizationCVE-2026-59318
Affects org.springframework.ai:spring-ai-model | Versions [1.0.0,2.0.1)
Has fix
MavenPublished 23 Aug 2026
  • H
Prompt InjectionCVE-2026-41713
Affects org.springframework.ai:spring-ai-model | Versions [,1.0.7)[1.1.0-M1, 1.1.6)
Has fix
MavenPublished 10 May 2026
  • H
Prompt InjectionCVE-2026-41713
Affects org.springframework.ai:spring-ai-model-chat-memory-repository-jdbc | Versions [,1.0.7)[1.1.0-M1, 1.1.6)
Has fix
MavenPublished 10 May 2026
  • M
Improper Neutralization of Special Elements in Data Query LogicCVE-2026-59319
Affects org.springframework.ai:spring-ai-model-chat-memory-repository-redis | Versions [2.0.0,2.0.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Improper Neutralization of Special Elements in Data Query LogicCVE-2026-40967
Affects org.springframework.ai:spring-ai-mongodb-atlas-store | Versions [,1.0.6)[1.1.0-M1, 1.1.5)
Has fix
MavenPublished 29 Apr 2026
  • H
Improper Input ValidationCVE-2026-22743
Affects org.springframework.ai:spring-ai-neo4j-store | Versions [,1.0.5)[1.1.0-M1,1.1.4)
Has fix
MavenPublished 27 Mar 2026
  • H
Improper Neutralization of Special Elements in Data Query LogicCVE-2026-40967
Affects org.springframework.ai:spring-ai-oracle-store | Versions [,1.0.6)[1.1.0-M1, 1.1.5)
Has fix
MavenPublished 29 Apr 2026
  • H
Uncontrolled RecursionCVE-2026-47851
Affects org.springframework.ai:spring-ai-pdf-document-reader | Versions [1.0.0,2.0.1)
Has fix
MavenPublished 26 Aug 2026
  • H
Allocation of Resources Without Limits or ThrottlingCVE-2026-40980
Affects org.springframework.ai:spring-ai-pdf-document-reader | Versions [,1.0.6)[1.1.0-M1, 1.1.5)
Has fix
MavenPublished 28 Apr 2026
  • H
Improper Neutralization of Special Elements in Data Query LogicCVE-2026-40967
Affects org.springframework.ai:spring-ai-pgvector-store | Versions [,1.0.6)[1.1.0-M1, 1.1.5)
Has fix
MavenPublished 29 Apr 2026
  • L
Use of a Broken or Risky Cryptographic AlgorithmCVE-2026-59308
Affects org.springframework.ai:spring-ai-redis-semantic-cache | Versions [2.0.0,2.0.1)
Has fix
MavenPublished 23 Aug 2026
  • H
Improper Neutralization of Special Elements in Data Query LogicCVE-2026-40967
Affects org.springframework.ai:spring-ai-redis-store | Versions [,1.0.6)[1.1.0-M1, 1.1.5)
Has fix
MavenPublished 29 Apr 2026