| Package | Affected versions | Patched versions |
|---|---|---|
| org.springframework.ai:spring-ai-client-chat | ≥ 1.1.0-M1, < 1.1.6< 1.0.7 | 1.1.61.0.7 |
| spring ai | ≥ 1.0.0, < 1.0.7≥ 1.1.0, < 1.1.6 | 1.0.71.1.6 |
A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an unintended way. Applications using the affected advisor with user-controlled input may be susceptible to manipulation of model behavior across conversation turns.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free