Skip to content
OpenAdvisories

Package · Maven

org.springframework.ai:spring-ai-anthropic

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.5
    CVE-2026-41863

    LLM-influenced filename used unsanitized in Path.resolve before file write in Spring AI support for Anthropic Skills API

    Spring AI's support for Anthropic's Skills API used LLM-influenced filenames unsanitized in Path.resolve before writing files to disk. This could allow a malicious user to write files outside the intended target directory, including restricted directories. Af…

    Spring Spring AI org.springframework.ai:spring-ai-anthropic Maven