Sharlongwen

**Name of the Vulnerable Software and Affected Versions** Spring Data JPA version 4.1.0 Spring Data JPA versions 4.0.0 through 4.0.6 Spring Data JPA versions 3.5.0 through 3.5.13 Spring Data JPA versions 3.0.0 through 3.4.15 **Description** Sort validation can be bypassed when parameters containing crafted payloads are accepted from untrusted sources. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Spring AI versions 1.0.0 through 1.0.6 Spring AI versions 1.1.0 through 1.1.5 **Description** The `doDelete(List)` function in the MilvusVectorStore implementation is susceptible to filter-expression injection. This occurs because document IDs are not properly sanitized, which could allow an attacker to destroy data. **Recommendations** Upgrade Spring AI versions 1.0.0 through 1.0.6 to 1.0.7 or greater. Upgrade Spring AI versions 1.1.0 through 1.1.5 to 1.1.6 or greater.