Sharlong Wen

JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper include java.net in their default trusted packages list. This configuration, which is the default for all @KafkaListener consumers, allows an external Kafka producer to inject a `java.net.InetAddress` type through the `spring json header types` message header, potentially leading to Server-Side Request Forgery (SSRF) via DNS resolution.

Various `FilterExpressionConverter` implementations fail to properly escape keys and values when translating filter expression objects into specific vector store query languages. This improper escaping allows for query injection, which can enable attackers to alter vector store queries, potentially leading to data exposure and tampering.

An issue in `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries by using crafted document IDs.