CVE-2026-47835
3 advisories.
Maven/org.springframework.ai:spring-ai-opensearch-store CVE-2026-47835: high 8.6, EPSS 0.42%
Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores
Action: Upgrade org.springframework.ai:spring-ai-opensearch-store to 1.0.9 (1.0.x) or 1.1.8 (1.1.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.0.9 | - |
| 1.1.0 | 1.1.8 | - |
Fixed versions
| 1.0.9 | 1.1.8 |
Sources
- osv: GHSA-cmwh-w62w-r2mf
- https://nvd.nist.gov/vuln/detail/CVE-2026-47835
- https://github.com/spring-projects/spring-ai/commit/2b20cfc8f478444f942d4be7a867d254441ff991
- https://github.com/spring-projects/spring-ai/commit/9787991aa1ed92c511131ddf4e142bd94051e6e7
- https://github.com/spring-projects/spring-ai
- https://github.com/spring-projects/spring-ai/releases/tag/v1.0.9
- https://github.com/spring-projects/spring-ai/releases/tag/v1.1.8
- https://spring.io/security/cve-2026-47835
CVE-2026-47835 · published · modified · JSON
Maven/org.springframework.ai:spring-ai-elasticsearch-store CVE-2026-47835: high 8.6, EPSS 0.42%
Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores
Action: Upgrade org.springframework.ai:spring-ai-elasticsearch-store to 1.0.9 (1.0.x) or 1.1.8 (1.1.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.0.9 | - |
| 1.1.0 | 1.1.8 | - |
Fixed versions
| 1.0.9 | 1.1.8 |
Sources
- osv: GHSA-cmwh-w62w-r2mf#Maven/org.springframework.ai:spring-ai-elasticsearch-store
- https://nvd.nist.gov/vuln/detail/CVE-2026-47835
- https://github.com/spring-projects/spring-ai/commit/2b20cfc8f478444f942d4be7a867d254441ff991
- https://github.com/spring-projects/spring-ai/commit/9787991aa1ed92c511131ddf4e142bd94051e6e7
- https://github.com/spring-projects/spring-ai
- https://github.com/spring-projects/spring-ai/releases/tag/v1.0.9
- https://github.com/spring-projects/spring-ai/releases/tag/v1.1.8
- https://spring.io/security/cve-2026-47835
CVE-2026-47835 · published · modified · JSON
Maven/org.springframework.ai:spring-ai-gemfire-store CVE-2026-47835: high 8.6, EPSS 0.42%
Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores
Action: Upgrade org.springframework.ai:spring-ai-gemfire-store to 1.0.9 (1.0.x) or 1.1.8 (1.1.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.0.9 | - |
| 1.1.0 | 1.1.8 | - |
Fixed versions
| 1.0.9 | 1.1.8 |
Sources
- osv: GHSA-cmwh-w62w-r2mf#Maven/org.springframework.ai:spring-ai-gemfire-store
- https://nvd.nist.gov/vuln/detail/CVE-2026-47835
- https://github.com/spring-projects/spring-ai/commit/2b20cfc8f478444f942d4be7a867d254441ff991
- https://github.com/spring-projects/spring-ai/commit/9787991aa1ed92c511131ddf4e142bd94051e6e7
- https://github.com/spring-projects/spring-ai
- https://github.com/spring-projects/spring-ai/releases/tag/v1.0.9
- https://github.com/spring-projects/spring-ai/releases/tag/v1.1.8
- https://spring.io/security/cve-2026-47835
CVE-2026-47835 · published · modified · JSON