product of vmware

spring ai

3 thingsrelated by NVD

Severity

Being told

The feed says each thing that enters, leaves or changes; a reader adds its address, /zetlyn/trackers/cve/things.atom?q=…, to theirs.

In Spring AI's tool calling support, the per-request tool list is advertised to the model as a boundary but is not fully enforced when a… CVE-2026-59318	Severity critical
In Spring AI's Semantic Cache support, the context hash used to isolate cached responses between different system prompts could allow… CVE-2026-59308	Severity medium
The MCP Streamable HTTP server transport (WebFlux and WebMvc variants) does not place any limit on the number of sessions it retains, and… CVE-2026-59279	Severity high