| Package | Affected versions | Patched versions |
|---|---|---|
| org.springframework.ai:spring-ai-advisors-vector-store | ≥ 1.1.0-M1, < 1.1.6≥ 2.0.0-M1, < 2.0.0-M6< 1.0.7 | 1.1.62.0.0-M61.0.7 |
| org.springframework.ai:spring-ai-client-chat | ≥ 1.1.0-M1, < 1.1.6≥ 2.0.0-M1, < 2.0.0-M6< 1.0.7 | 1.1.62.0.0-M61.0.7 |
| org.springframework.ai:spring-ai-model | ≥ 1.1.0-M1, < 1.1.6≥ 2.0.0-M1, < 2.0.0-M6< 1.0.7 | 1.1.62.0.0-M61.0.7 |
| spring ai | ≥ 1.0.0, < 1.0.7≥ 1.1.0, < 1.1.6 | 1.0.71.1.6 |
Spring AI's chat memory component contained a problematic default that, when not explicitly overridden, could result in unintended data exposure between users.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free