Sharlong Wen

**Name of the Vulnerable Software and Affected Versions** Spring for Apache Kafka version 4.1.0 Spring for Apache Kafka versions 4.0.0 through 4.0.6 Spring for Apache Kafka versions 3.0.0 through 3.3.16 Spring for Apache Kafka versions 2.9.0 through 2.9.14 Spring for Apache Kafka versions 2.8.12 and earlier **Description** JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper include java.net in their default trusted packages list. This configuration, which is the default for all @KafkaListener consumers, allows an external Kafka producer to inject a `java.net.InetAddress` type through the `spring json header types` message header, potentially leading to Server-Side Request Forgery (SSRF) via DNS resolution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Spring AI versions 1.0.0 through 1.0.5 Spring AI versions 1.1.0 through 1.1.4 **Description** Various `FilterExpressionConverter` implementations fail to properly escape keys and values when translating filter expression objects into specific vector store query languages. This improper escaping allows for query injection, which can enable attackers to alter vector store queries, potentially leading to data exposure and tampering. **Recommendations** Update versions 1.0.0 through 1.0.5 to 1.0.6. Update versions 1.1.0 through 1.1.4 to 1.1.5.

**Name of the Vulnerable Software and Affected Versions** Spring AI versions 1.0.0 through 1.0.5 Spring AI versions 1.1.0 through 1.1.4 **Description** An issue in `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries by using crafted document IDs. **Recommendations** Update versions 1.0.0 through 1.0.5 to version 1.0.6. Update versions 1.1.0 through 1.1.4 to version 1.1.5.