Disclosure summary
Cantina identified and human-verified this vulnerability in Spring AI. The finding was coordinated with the affected maintainer through responsible disclosure before publication.
Filter keys enable Cypher injection in Neo4j stores.
Verification standard
Cantina publishes a disclosure only after reproducing the behavior, validating its security impact, and coordinating remediation with the affected project.