<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: spring-ai</title><description>Every new CVE for spring-ai.</description><link>https://agentprime.io/</link><item><title>CVE-2026-59319: RediSearch Tag Injection in RedisChatMemoryRepository Allows Cross-Conversation Data Exposure</title><link>https://agentprime.io/advisories/CVE-2026-59319/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59319/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Aug 2026 18:04:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-59294: Arbitrary File Write via Path Traversal in ResourceCacheService</title><link>https://agentprime.io/advisories/CVE-2026-59294/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59294/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Aug 2026 17:57:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-47852: Predictable cache directory location allows local ONNX model substitution in Spring AI</title><link>https://agentprime.io/advisories/CVE-2026-47852/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47852/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 26 Aug 2026 23:28:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-47851: Unbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document Reader</title><link>https://agentprime.io/advisories/CVE-2026-47851/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47851/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 26 Aug 2026 23:28:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-59318: DefaultToolCallingManager Global Resolver Fallback Allows Unadvertised Tool Dispatch via Prompt Injection</title><link>https://agentprime.io/advisories/CVE-2026-59318/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59318/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 21 Aug 2026 12:07:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-59308: Semantic Cache Cross-Tenant Isolation Bypass via SHA-256 Truncation</title><link>https://agentprime.io/advisories/CVE-2026-59308/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59308/</guid><description>CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 21 Aug 2026 12:07:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-59279: Unbounded persistent session allocation via repeated initialize requests</title><link>https://agentprime.io/advisories/CVE-2026-59279/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59279/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 21 Aug 2026 12:07:05 GMT</pubDate><category>CVE</category></item></channel></rss>