Known vulnerabilities in Spring AI 2.0.0-M2

Vendor: Broadcom
Software: Spring AI
Version: 2.0.0-M2
Software CPE: cpe:2.3:a:broadcom:spring_ai:*:*:*:*:*:*:*:*
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Spring AI version 2.0.0-M2 Spring AI 2.0.0-M2 is affected by 2 vulnerabilities: 2 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146244 - Uncontrolled Recursion
CVE-2026-47851
CWE-674 Medium
No
No
1.0.10, 1.1.9, 2.0.0.1 28.08.2026 SB20260828172
#VU146243 - Insecure Temporary File
CVE-2026-47852
CWE-377 Medium
No
No
1.0.10, 1.1.9, 2.0.0.1 28.08.2026 SB20260828172