How many CVEs does Spring Spring AI have?

Spring Spring AI has 18 published CVE records since 2026.

How many Spring Spring AI CVEs are in CISA KEV?

None of Spring Spring AI's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Spring Spring AI are affected?

21 distinct Spring Spring AI versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Spring Spring AI CVEs?

Spring Spring AI's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-377 (Insecure Temporary File), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-943 (Improper Neutralization of Special Elements in Data Query Logic).

How many critical Spring Spring AI vulnerabilities are there?

Spring Spring AI has 2 critical and 10 high-severity CVEs.

What is the average severity of Spring Spring AI CVEs?

The average CVSS base score across Spring Spring AI's scored CVEs is 7.5.

Spring AI Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Spring AI vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Spring AI Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Spring AI has 18 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.5.

Severity and exploitation

How the CVSS severity of Spring AI's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High10

Medium6

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Spring AI's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No Spring AI CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Spring AI version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

>= 2.0.07 CVEs
1.0.0 <= v < 1.0.54 CVEs
1.0.0 <= v < 1.0.64 CVEs
1.1.0 <= v < 1.1.44 CVEs
1.1.0 <= v < 1.1.54 CVEs
1.1.0 <= v <= 1.1.84 CVEs
1.0.0 <= v <= 1.0.93 CVEs
<= 1.0.91 CVE
1.0.0 <= v < 1.0.71 CVE
1.0.0 <= v < 1.0.91 CVE
1.1.0 <= v < 1.1.61 CVE
1.1.0 <= v < 1.1.8

Common weakness types

The CWE weakness categories most often found in Spring AI CVEs. Follow any weakness for its full explanation.

Other Spring products

Browse vulnerabilities for other products by Spring.

Spring Framework53 CVEs Spring Security33 CVEs Spring Integration17 CVEs Spring Boot15 CVEs Spring Cloud Config12 CVEs Spring for GraphQL9 CVEs Spring AMQP8 CVEs Spring Cloud Function

Frequently asked questions

Common questions about Spring AI vulnerabilities.

How many CVEs does Spring Spring AI have?: Spring Spring AI has 18 published CVE records since 2026.
How many Spring Spring AI CVEs are in CISA KEV?: None of Spring Spring AI's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Spring Spring AI vulnerabilities?: No Spring Spring AI CVEs currently have a tracked public exploit in this dataset.
Which versions of Spring Spring AI are affected?: 21 distinct Spring Spring AI versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Spring Spring AI CVEs?: Spring Spring AI's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-377 (Insecure Temporary File), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-943 (Improper Neutralization of Special Elements in Data Query Logic).
How many critical Spring Spring AI vulnerabilities are there?: Spring Spring AI has 2 critical and 10 high-severity CVEs.
What is the average severity of Spring Spring AI CVEs?: The average CVSS base score across Spring Spring AI's scored CVEs is 7.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Spring AI vulnerabilities

Get an alert for each new Spring AI CVE, with AI-written analysis and remediation steps.

Create an account See pricing