Threats tagged 'ghsa-r5hp-3cgj-j6xv'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.1	CVE-2026-40979Org.springframework.ai:spring ai transformers: Spring AI's ONNX model cache defaults to world-writable predictable Medium6.12026-04-28GCVE DatabaseCVE-2026-40979 Spring AI versions 1.0.0 through 1.0.5 and 1.1.0 through 1.1.4 have a vulnerability where the ONNX model cache is world-writable and predictable. This can expose the ONNX model in shared environments, potentially allowing unauthorized modification. The issue is fixed in versions 1.0.6 and 1.1.5. Report on CVE-2026-40979 Vulnerability CWE-377 #ghsa-r5hp-3cgj-j6xv #maven	GCVE Database	2026-04-28

Page 1 of 1