Package impact
MAVEN / org.springframework.ai:spring-ai-vector-store
| CVE | Severity | CVSS | Risk | Published | Description | Impact |
|---|---|---|---|---|---|---|
| CVE-2026-22738 | critical | 9.8 | 9.8 | 2mo ago | Spring AI: SpEL injection is triggered when a user-supplied value is used as a filter expression key | |
| CVE-2026-40967 | high | 8.6 | 8.6 | 1mo ago | Spring AI has a VectorStore FilterExpression Converter injection |