Login Request a demo
SA
Product
Spring AI
by VMware · last CVE Aug 27, 2026
23
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities23In the news0Timeline
Severity mix
Critical 2High 14Medium 7Low 0
Severity
All severities23Critical2High14Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Spring AI to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-59318
9.8
0%
Aug 21
DefaultToolCallingManager Global Resolver Fallback Allows Unadvertised Tool Dispatch via Prompt Injection
Affected: 1.0.0 before 1.0.10; 1.1.0 before 1.1.9; 2.0.0 before 2.0.1
CVE-2026-22738
9.8
1%
Mar 27
SpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code Execution
Affected: 1.0.0 before 1.0.5; 1.1.0 before 1.1.4
Showing 2