CyberRota
← Ana sayfaya dön

CVE-2026-40978

HIGH · CVSS 8.8 EPSS %0.02

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-04-28T09:16:16.583 · Çekilme zamanı: 2026-05-28T06:00:24.749624+00:00

CyberRota Yorumu

SQL Injection riski içeriyor.

CVE
CVE-2026-40978
Severity
HIGH
CVSS
8.8
EPSS
%0.02

Orijinal NVD Açıklaması

SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via crafted document IDs. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5)