Known vulnerabilities in Spring AI 1.1.5

Vendor: Broadcom
Software: Spring AI
Version: 1.1.5
Software CPE: cpe:2.3:a:broadcom:spring_ai:*:*:*:*:*:*:*:*
Website: https://www.broadcom.com/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Spring AI version 1.1.5 Spring AI 1.1.5 is affected by 7 vulnerabilities: 3 high, 3 medium, 1 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146244 - Uncontrolled Recursion
CVE-2026-47851		 CWE-674 Medium
No
No
 1.0.10, 1.1.9, 2.0.0.1 28.08.2026 SB20260828172
#VU146243 - Insecure Temporary File
CVE-2026-47852		 CWE-377 Medium
No
No
 1.0.10, 1.1.9, 2.0.0.1 28.08.2026 SB20260828172
#VU146194 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-47835		 CWE-74 High
No
No
 1.0.9, 1.1.8 28.08.2026 SB20260828161
#VU132209 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-41863		 CWE-22 Low
No
No
 1.1.7 23.05.2026 SB2026052317
#VU130984 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-41713		 CWE-74 High
No
No
 1.0.7, 1.1.6 11.05.2026 SB2026051173
#VU130983 - Improper Access Control
CVE-2026-41712		 CWE-284 Medium
No
No
 1.0.7, 1.1.6 11.05.2026 SB2026051173
#VU130982 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-41705		 CWE-89 High
No
No
 1.0.7, 1.1.6 11.05.2026 SB2026051173