Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 3 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,220All CVEsplus 18,875 rejected
- 803Last 24 hours3,104 in the last 7 days
- 17,402Last 30 days1,564 of them critical
- 1,767Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 10 | 7 | 0 | 0 | 18 | 18 |
| Title | ||
|---|---|---|
| CVE-2026-59319 | RediSearch Tag Injection in RedisChatMemoryRepository Allows Cross-Conversation Data ExposureSpring · Spring AI | Medium4.3 |
| CVE-2026-59294 | Arbitrary File Write via Path Traversal in ResourceCacheServiceSpring · Spring AI | Medium5.9 |
| CVE-2026-47852 | Predictable cache directory location allows local ONNX model substitution in Spring AISpring · Spring AI | High7.5 |
| CVE-2026-47851 | Unbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document ReaderSpring · Spring AI | High7.5 |
| CVE-2026-59318 | DefaultToolCallingManager Global Resolver Fallback Allows Unadvertised Tool Dispatch via Prompt InjectionSpring · Spring AI | Medium6.5 |
| CVE-2026-59308 | Semantic Cache Cross-Tenant Isolation Bypass via SHA-256 TruncationSpring · Spring AI | Medium4.2 |
| CVE-2026-59279 | Unbounded persistent session allocation via repeated initialize requestsSpring · Spring AI | High7.5 |
| CVE-2026-47835 | Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector StoresSpring · Spring AI | High8.6 |
| CVE-2026-41863 | LLM-influenced filename used unsanitized in Path.resolve before file write in Spring AI support for Anthropic Skills APISpring · Spring AI | Medium6.5 |
| CVE-2026-41705 | Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized document IDs. Spring AI 1.0.x:…Spring · Spring AI | High8.6 |
| CVE-2026-40980 | In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when handled by `ForkPDFLayoutTextStripper`.…Spring · Spring AI | Medium6.5 |
| CVE-2026-40979 | In Spring AI, having access to a shared environment can expose the ONNX model used by the application. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in…Spring · Spring AI | Medium6.1 |
| CVE-2026-40978 | SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via crafted document IDs. Affected versions:…Spring · Spring AI | High8.8 |
| CVE-2026-40967 | In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector store query languages.…Spring · Spring AI | High8.6 |
| CVE-2026-22744 | In RedisFilterExpressionConverter of spring-ai-redis-store, when a user-controlled string is passed as a filter value for a TAG field, stringValue() inserts…Spring · Spring AI | High7.5 |
| CVE-2026-22743 | Server-Side Request Forgery via Filter Expression Keys in Neo4jVectorStoreSpring · Spring AI | High7.5 |
| CVE-2026-22742 | Server-Side Request Forgery in BedrockProxyChatModel via Unvalidated Media URL FetchingSpring · Spring AI | High8.6 |
| CVE-2026-22738 | SpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code ExecutionSpring · Spring AI | Critical9.8 |