Skip to content

Product

org.springframework.ai/spring-ai-pdf-document-reader vulnerabilities

1 published CVE affecting org.springframework.ai/spring-ai-pdf-document-reader, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest org.springframework.ai/spring-ai-pdf-document-reader CVEs

Newest publication first

  1. CVE-2026-40980 Spring AI Vulnerable to OOM by attacker-controlled PDF

    Published
    MediumCVSS 6.5 EPSS 0.24%

    In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when handled by ForkPDFLayoutTextStripper. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5)

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.