Vmware Spring Ai vulnerabilities
23 known vulnerabilities affecting vmware/spring_ai.
Total CVEs
23
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH14MEDIUM7
Vulnerabilities
Page 2 of 2
CVE-2026-40979P4MEDIUMCVSS 6.1≥ 1.0.0, < 1.0.6≥ 1.1.0, < 1.1.52026-04-28
CVE-2026-40979 [MEDIUM] CWE-377 CVE-2026-40979: In Spring AI, having access to a shared environment can expose the ONNX model used by the applicatio
In Spring AI, having access to a shared environment can expose the ONNX model used by the application.
Affected versions:
Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5)
nvd
CVE-2026-59319P4MEDIUMCVSS 4.3≥ 2.0.0, < 2.0.12026-08-27
CVE-2026-59319 [MEDIUM] CWE-943 CVE-2026-59319: RedisChatMemoryRepository.findByMetadata() builds RediSearch tag and text queries from caller-suppli
RedisChatMemoryRepository.findByMetadata() builds RediSearch tag and text queries from caller-supplied metadata values without applying RediSearchUtil.escape(), unlike get(), clear(), and findByTimeRange() in the same class which do escape their inputs. An application that passes user-controlled values to findByMetadata() on a tag-typed metadata fie
nvd
CVE-2026-59308P4MEDIUMCVSS 4.3≥ 2.0.0, < 2.0.12026-08-21
CVE-2026-59308 [MEDIUM] CWE-668 CVE-2026-59308: In Spring AI's Semantic Cache support, the context hash used to isolate cached responses between dif
In Spring AI's Semantic Cache support, the context hash used to isolate cached responses between different system prompts could allow cached responses to be shared across unrelated contexts.
Affected versions:
Spring AI: 2.0.0
nvd
← Previous2 / 2