Skip to content
OpenAdvisories

Package · Maven

org.springframework.ai:spring-ai-neo4j-store

1 known vulnerabilities.

1 result · Feed

  • High 7.5

    Server-Side Request Forgery via Filter Expression Keys in Neo4jVectorStore

    Spring AI's spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVectorFilterExpressionConverter. When a user-controlled string is passed as a filter expression key in Neo4jVectorFilterExpressionConverter of spring-ai-neo4j-store, doKey() e…