Skip to content
OpenAdvisories

Package · Maven

org.springframework.ai:spring-ai-redis-store

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2026-22744

    Spring AI Redis Store has TAG Field Query Injection Through Improper Neutralization of Special Characters

    In RedisFilterExpressionConverter of spring-ai-redis-store, when a user-controlled string is passed as a filter value for a TAG field, stringValue() inserts the value directly into the @field:{VALUE} RediSearch TAG block without escaping characters.This issue…

    Spring Spring AI org.springframework.ai:spring-ai-redis-store Maven