
SpEL injection in Spring AI SimpleVectorStore enables RCE
Spring’s advisory warns `SimpleVectorStore` can execute attacker-supplied SpEL via filter keys, enabling remote code execution in Spring AI 1.0.x and 1.1.x apps.
NewsJavaInjection
1 minYesterday
