Threats tagged 'ghsa-qc4j-qjqx-vr58'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.6	CVE-2026-40967Org.springframework.ai:spring ai vector store: Spring AI has a VectorStore FilterExpression Converter injection High8.62026-04-28GCVE DatabaseCVE-2026-40967 Spring AI's VectorStore FilterExpressionConverter implementations improperly escape keys and values in filter expressions, allowing alteration of vector store queries. This vulnerability affects Spring AI versions 1.0.0 through 1.0.5 and 1.1.0 through 1.1.4, with fixes available in versions 1.0.6 and 1.1.5. The flaw can lead to high impact including confidentiality loss, limited integrity compromise, and availability disruption. Report on CVE-2026-40967 Vulnerability CWE-94 #ghsa-qc4j-qjqx-vr58 #maven	GCVE Database	2026-04-28

Page 1 of 1