Known vulnerabilities in Spring AI 1.0.7

Vendor: Broadcom
Software: Spring AI
Version: 1.0.7
Software CPE: cpe:2.3:a:broadcom:spring_ai:*:*:*:*:*:*:*:*
Website: https://www.broadcom.com/
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Spring AI version 1.0.7 Spring AI 1.0.7 is affected by 3 vulnerabilities: 1 high, 2 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146244 - Uncontrolled Recursion
CVE-2026-47851		 CWE-674 Medium
No
No
 1.0.10, 1.1.9, 2.0.0.1 28.08.2026 SB20260828172
#VU146243 - Insecure Temporary File
CVE-2026-47852		 CWE-377 Medium
No
No
 1.0.10, 1.1.9, 2.0.0.1 28.08.2026 SB20260828172
#VU146194 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-47835		 CWE-74 High
No
No
 1.0.9, 1.1.8 28.08.2026 SB20260828161