What is GHSA-qc4j-qjqx-vr58?

GHSA-qc4j-qjqx-vr58 is a security advisory published by GitHub Security Advisories with High severity. Spring AI has a VectorStore FilterExpression Converter injection

Which CVE IDs does GHSA-qc4j-qjqx-vr58 cover?

GHSA-qc4j-qjqx-vr58 covers the following CVE IDs: CVE-2026-40967. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qc4j-qjqx-vr58?

GHSA-qc4j-qjqx-vr58 has a CVSS v3 base score of 8.6, published by GitHub Security Advisories.

Which products are affected by GHSA-qc4j-qjqx-vr58?

GHSA-qc4j-qjqx-vr58 affects 2 products, including: maven/org.springframework.ai:spring-ai-vector-store:\u003e= 1.0.0, \u003c 1.0.6; maven/org.springframework.ai:spring-ai-vector-store:\u003e= 1.1.0, \u003c 1.1.5.

GHSA-qc4j-qjqx-vr58HighCVSS 8.6

Spring AI has a VectorStore FilterExpression Converter injection

Vendor

GitHub Security Advisories

Published

April 28, 2026

Last Modified

May 6, 2026

🔗 CVE IDs covered (1)

CVE-2026-40967 →

📋 Description

In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector store query languages. In several cases, keys and values are not properly escaped, leading to the ability to alter the query.

Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5)

🎯 Affected products2

maven/org.springframework.ai:spring-ai-vector-store:>= 1.0.0, < 1.0.6
maven/org.springframework.ai:spring-ai-vector-store:>= 1.1.0, < 1.1.5

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-40967
https://spring.io/security/cve-2026-40967
https://github.com/advisories/GHSA-qc4j-qjqx-vr58