| Package | Affected versions | Patched versions |
|---|---|---|
| org.springframework.ai:spring-ai-pdf-document-reader | ≥ 1.0.0, < 1.0.6≥ 1.1.0, < 1.1.5 | 1.0.61.1.5 |
| spring ai | ≥ 1.0.0, < 1.0.6≥ 1.1.0, < 1.1.5 | 1.0.61.1.5 |
In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when handled by ForkPDFLayoutTextStripper.
Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5)
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free