SQL Injection

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. Additional information exposure with Spring Data JPA derived queriesCVE-2019-3797Spring · CVSS 3.5 · 1.1% likely

   CWE-89

2. Spring Data JPA Sort expression validation bypassCVE-2026-47834Spring · CVSS 4.8 · 0.3% likely

   CWE-89

3. SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via crafted document IDs. Affected versions: Spring AI: 1.0.0 -…CVE-2026-40978Spring · CVSS 8.8 · 0.3% likely

   CWE-89

4. Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector StoresCVE-2026-47835Spring · CVSS 8.6 · 0.3% likely

   CWE-943

5. RediSearch Tag Injection in RedisChatMemoryRepository Allows Cross-Conversation Data ExposureCVE-2026-59319Spring · CVSS 4.3 · 0.3% likely

   CWE-943

6. Spring Data MongoDB Bind Parameter Literal Quoting BreakoutCVE-2026-41696Spring · CVSS 5.9 · 0.3% likely

   CWE-943

7. Server-Side Request Forgery via Filter Expression Keys in Neo4jVectorStoreCVE-2026-22743Spring · CVSS 7.5 · 0.3% likely

   CWE-89

8. Spring Data Relational Parameter not Escaped for Query By Example LIKE PatternCVE-2026-41697Spring · CVSS 4.8 · 0.2% likely

   CWE-943

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.