Known vulnerabilities in Spring AI 1.0.5

Vendor: Broadcom
Software: Spring AI
Version: 1.0.5
Software CPE: cpe:2.3:a:broadcom:spring_ai:*:*:*:*:*:*:*:*
Website: https://www.broadcom.com/
Total vulnerabilities: 11
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Spring AI version 1.0.5 Spring AI 1.0.5 is affected by 11 vulnerabilities: 4 high, 5 medium, 2 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146244 - Uncontrolled Recursion
CVE-2026-47851		 CWE-674 Medium
No
No
 1.0.10, 1.1.9, 2.0.0.1 28.08.2026 SB20260828172
#VU146243 - Insecure Temporary File
CVE-2026-47852		 CWE-377 Medium
No
No
 1.0.10, 1.1.9, 2.0.0.1 28.08.2026 SB20260828172
#VU146194 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-47835		 CWE-74 High
No
No
 1.0.9, 1.1.8 28.08.2026 SB20260828161
#VU130984 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-41713		 CWE-74 High
No
No
 1.0.7, 1.1.6 11.05.2026 SB2026051173
#VU130983 - Improper Access Control
CVE-2026-41712		 CWE-284 Medium
No
No
 1.0.7, 1.1.6 11.05.2026 SB2026051173
#VU130982 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-41705		 CWE-89 High
No
No
 1.0.7, 1.1.6 11.05.2026 SB2026051173
#VU128241 - Uncontrolled Memory Allocation
CVE-2026-40980		 CWE-789 Low
No
No
 1.0.6, 1.1.5 27.04.2026 SB20260427184
#VU128240 - Incorrect Permission Assignment for Critical Resource
CVE-2026-40979		 CWE-732 Low
No
No
 1.0.6, 1.1.5 27.04.2026 SB20260427184
#VU128239 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-40978		 CWE-89 Medium
No
No
 1.0.6, 1.1.5 27.04.2026 SB20260427184
#VU128238 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-40967		 CWE-74 High
No
No
 1.0.6, 1.1.5 27.04.2026 SB20260427184
#VU128237 - Improper input validation
CVE-2026-40966		 CWE-20 Medium
No
No
 1.0.6, 1.1.5 27.04.2026 SB20260427184