Threats tagged 'ghsa-63c8-m9m2-cvr3'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.8	CVE-2026-40978Org.springframework.ai:spring ai azure cosmos db store: Spring AI has SQL Injection in CosmosDBVectorStore.doDelete() High8.82026-04-28GCVE DatabaseCVE-2026-40978 A SQL injection vulnerability exists in Spring AI's CosmosDBVectorStore component, specifically in the doDelete() method. This flaw allows attackers with limited privileges to execute arbitrary SQL queries by crafting malicious document IDs. The issue affects Spring AI versions 1.0.0 through 1.0.5 and 1.1.0 through 1.1.4. Fixed versions are 1.0.6 and 1.1.5. Report on CVE-2026-40978 Vulnerability CWE-89 #ghsa-63c8-m9m2-cvr3 #maven	GCVE Database	2026-04-28

Page 1 of 1