SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via crafted document IDs

CVE-2026-22730: SQL Injection in Spring AI MariaDBFilterExpressionConverter

Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized document IDs

In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector store query languages

Server-Side Request Forgery in BedrockProxyChatModel via Unvalidated Media URL Fetching

CVE-2026-22729: JSONPath Injection in Spring AI Vector Stores FilterExpressionConverter

Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisor

Predictable cache directory location allows local ONNX model substitution in Spring AI

Unbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document Reader

Unbounded persistent session allocation via repeated initialize requests

Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores

ChatMemory DEFAULT_CONVERSATION_ID causes unintended cross-user data leakage

In RedisFilterExpressionConverter of spring-ai-redis-store, when a user-controlled string is passed as a filter value for a TAG field, stringValue() inserts the value directly…

Server-Side Request Forgery via Filter Expression Keys in Neo4jVectorStore