VMware Spring AI vulnerabilities
5 published CVEs name VMware Spring AI among the affected products.
- Published CVEs
- 5
- Last 12 months
- 5
- Critical
- 0
- Known exploited
- 0
Critical 0High 4Medium 1Low 0Not scored 0
Newest CVEs
- CVE-2026-41713
Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisor
VMware · Spring AI
High8.2 - CVE-2026-41712
ChatMemory DEFAULT_CONVERSATION_ID causes unintended cross-user data leakage
VMware · Spring AI
High7.5 - CVE-2026-40966
VectorStoreChatMemoryAdvisor conversation scoping can lead to cross-tenant memory exfiltration
VMware · Spring AI
Medium5.9 - CVE-2026-22729
CVE-2026-22729: JSONPath Injection in Spring AI Vector Stores FilterExpressionConverter
VMware · Spring AI
High8.6 - CVE-2026-22730
CVE-2026-22730: SQL Injection in Spring AI MariaDBFilterExpressionConverter
VMware · Spring AI
High8.8