Veille CVE

Mardi 12 mai 2026

2 CVE

Critique 0 Élevée 2 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « VMware Spring AI » ✕
  1. CVE-2026-41713 8.2 Élevée

    VMware Spring AI

    A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an unintended way. Applications using the affected advisor with user-controlled input may be susceptible to manipulation of model behavior across conversation turns.

  2. CVE-2026-41712 7.5 Élevée

    VMware Spring AI

    Spring AI's chat memory component contained a problematic default that, when not explicitly overridden, could result in unintended data exposure between users.