Skip to content
OpenAdvisories

Package · Maven

org.springframework.ai:spring-ai-bedrock-converse

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.6
    CVE-2026-22742

    Server-Side Request Forgery in BedrockProxyChatModel via Unvalidated Media URL Fetching

    Spring AI's spring-ai-bedrock-converse contains a Server-Side Request Forgery (SSRF) vulnerability in BedrockProxyChatModel when processing multimodal messages that include user-supplied media URLs. Insufficient validation of those URLs allows an attacker to …

    Spring Spring AI org.springframework.ai:spring-ai-bedrock-converse Maven