{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5e1f1db2-bc5f-5675-9a7f-bcce7879deda",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-ai-vector-store",
      "purl": "pkg:maven/org.springframework.ai/spring-ai-vector-store@1.1.8-tuxcare.1",
      "type": "library",
      "group": "org.springframework.ai",
      "bom-ref": "pkg:maven/org.springframework.ai/spring-ai-vector-store@1.1.8-tuxcare.1",
      "version": "1.1.8-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-ai-vector-store",
            "purl": "pkg:maven/org.springframework.ai/spring-ai-vector-store@1.1.8",
            "type": "library",
            "group": "org.springframework.ai",
            "version": "1.1.8"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-22729",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.ai/spring-ai-vector-store@1.1.8-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f22f2b4d-aa8e-539d-807b-b62e03cffbfd",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-22729 does not affect version 1.1.8-tuxcare.1 of org.springframework.ai:spring-ai-vector-store. Spring AI 1.1.8 is not affected by CVE-2026-22729 (JSONPath injection vulnerability). The target repository contains comprehensive upstream-authored security fixes that were already present in the 1.1.8 release when TuxCare onboarded it. The fixes change AbstractFilterExpressionConverter.doSingleValue() from a concrete method with naive string concatenation to an abstract method, forcing all implementations to use proper escaping helpers (emitJsonValue, emitLuceneString, emitSpelString, emitODataString) that sanitize special characters according to each query language's syntax. The FilterExpressionTextParser was also fixed to properly unescape input strings. These defenses prevent injection of arbitrary logic in filter expressions across all supported vector stores.\n\nAdvisory cross-check (dlmn): outside the affected ranges of GitHub (>= 1.1.0-M1, < 1.1.3; < 1.0.4), NVD (>= 1.0.0, < 1.0.4; >= 1.1.0, < 1.1.3), cve.org (>= 1.0.x, < 1.0.4; >= 1.1.x, < 1.1.3), Snyk (>= 1.0.0-M5, < 1.0.4; >= 1.1.0-M1, < 1.1.3; >= 2.0.0-M1, < 2.0.0-M3).",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-22738",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.ai/spring-ai-vector-store@1.1.8-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bcaf3b05-67ab-59f0-95cc-613e01b0d31d",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-22738 does not affect version 1.1.8-tuxcare.1 of org.springframework.ai:spring-ai-vector-store. Spring AI 1.1.8 is NOT affected by CVE-2026-22738 (SpEL injection in SimpleVectorStore). The vulnerability required SpEL string concatenation of user-supplied filter keys, but this code path was replaced before release 1.1.8 shipped. The target uses SimpleVectorStoreFilterExpressionEvaluator (direct AST evaluation) instead of the vulnerable SimpleVectorStoreFilterExpressionConverter (SpEL string building). The fix was authored by the upstream vendor (Christian Tzolov, @broadcom.com) in commit 04742fb89 on 2026-03-17, three months before release 1.1.8 (2026-06-12), making this an upstream fix that shipped with the release.\n\nAdvisory cross-check (dlmn): outside the affected ranges of GitHub (>= 1.0.0, < 1.0.5; >= 1.1.0-M1, < 1.1.4), NVD (>= 1.0.0, < 1.0.5; >= 1.1.0, < 1.1.4), cve.org (>= 1.0.0, < 1.0.5; >= 1.1.0, < 1.1.4), Snyk (< 1.0.5; >= 1.1.0-M1, < 1.1.4).",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-40967",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.ai/spring-ai-vector-store@1.1.8-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:73c1273a-fa93-5b49-a0ff-587d53a47dce",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-40967 does not affect version 1.1.8-tuxcare.1 of org.springframework.ai:spring-ai-vector-store. The target Spring AI repository version 1.1.8 is NOT affected by CVE-2026-40967. The vulnerability (improper escaping of keys and values in FilterExpressionConverter implementations leading to query injection) was already fixed by upstream vendor Spring AI/Broadcom engineers in March-April 2026, and the fixes shipped in the upstream 1.1.8 release (June 12, 2026). TuxCare onboarded this already-fixed version on July 8, 2026. All examined FilterExpressionConverter implementations contain the proper escaping logic that the vendor patches add.\n\nAdvisory cross-check (dlmn): outside the affected ranges of GitHub (>= 1.0.0, < 1.0.6; >= 1.1.0, < 1.1.5), NVD (>= 1.0.0, < 1.0.6; >= 1.1.0, < 1.1.5), cve.org (>= 1.0.0, < 1.0.6; >= 1.1.0, < 1.1.5), Snyk (< 1.0.6; >= 1.1.0-M1, < 1.1.5; < 1.0.6; >= 1.1.0-M1, < 1.1.5; < 1.0.6; >= 1.1.0-M1, < 1.1.5; < 1.0.6; >= 1.1.0-M1, < 1.1.5; < 1.0.6; >= 1.1.0-M1, < 1.1.5; < 1.0.6; >= 1.1.0-M1, < 1.1.5; < 1.0.6; >= 1.1.0-M1, < 1.1.5; < 1.0.6; >= 1.1.0-M1, < 1.1.5; < 1.0.6; >= 1.1.0-M1, < 1.1.5; < 1.0.6; >= 1.1.0-M1, < 1.1.5; < 1.0.6; >= 1.1.0-M1, < 1.1.5; < 1.0.6; >= 1.1.0-M1, < 1.1.5).",
        "justification": "code_not_present"
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.ai/spring-ai-vector-store@1.1.8-tuxcare.1"
    }
  ]
}