Known vulnerabilities in Spring AI 1.1.6
Vendor:
Broadcom
Software:
Spring AI
Version:
1.1.6
Software CPE:
cpe:2.3:a:broadcom:spring_ai:*:*:*:*:*:*:*:*
Website:
https://www.broadcom.com/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Vulnerabilities by Severity
1.0.10
1.1.9
2.0.0.1
2.0.1
2.0.0
1.1.8
1.0.9
2.0.0-RC2
2.0.0-RC1
2.0.0-M8
2.0.0-M7
1.1.7
1.0.8
2.0.0-M6
1.1.6
1.0.7
2.0.0-M5
1.0.6
1.1.5
2.0.0-M4
1.1.4
1.0.5
2.0.0-M3
2.0.0-M2
2.0.0-M1
1.1.3
1.1.2
1.1.1
1.1.0-RC1
1.1.0-M4
1.1.0-M3
1.1.0-M2
1.1.0-M1
1.1.0
1.0.4
1.0.3
1.0.2
1.0.1
1.0.0-RC1
1.0.0-M8
1.0.0-M7
1.0.0-M6
1.0.0-M5
1.0.0-M4
1.0.0-M3
1.0.0-M2
1.0.0-M1
1.0.0
0.8.1
0.8.0
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU146244 - Uncontrolled Recursion CVE-2026-47851 |
CWE-674 | Medium | 1.0.10, 1.1.9, 2.0.0.1 | 28.08.2026 |
SB20260828172 |
||
| #VU146243 - Insecure Temporary File CVE-2026-47852 |
CWE-377 | Medium | 1.0.10, 1.1.9, 2.0.0.1 | 28.08.2026 |
SB20260828172 |
||
| #VU146194 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2026-47835 |
CWE-74 | High | 1.0.9, 1.1.8 | 28.08.2026 |
SB20260828161 |
||
| #VU132209 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-41863 |
CWE-22 | Low | 1.1.7 | 23.05.2026 |
SB2026052317 |