Sunday, May 10, 2026 · 2 of 5

1. Spring AI CVE-2026-41705

   Filter-expression injection in MilvusVectorStore; CVSS 8.6; upgrade Spring AI to 1.0.7 / 1.1.6 now.

   May 9