Beveiligingsadvies

CVE-2026-47835

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-15 18:54:19

Laatst bijgewerkt 2026-06-15 20:06:56

Toegewezen door vmware

CVSS-score 8.6

Status PUBLISHED

Beschrijving

In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire VectorDB. Affected components: spring-ai-elasticsearch-store, spring-ai-opensearch-store, spring-ai-gemfire-store. Affected versions: Spring AI 1.0.0 through 1.0.x (fix 1.0.9). Spring AI 1.1.0 through 1.1.x (fix 1.1.8).

← Alle CVE's bekijken Bekijk op cve.org ↗