Wednesday, April 29, 2026 · 1 of 5
Spring AI hit with 5 CVEs
Vector store SQL/JSONPath injection and cross-tenant memory exfiltration; patch to 1.0.6 / 1.1.5 now
JadidJust-in AI Developments, Incidents & DeadlinesJadidJust-in AI Developments, Incidents & DeadlinesWednesday, April 29, 2026 · 1 of 5
Vector store SQL/JSONPath injection and cross-tenant memory exfiltration; patch to 1.0.6 / 1.1.5 now