Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.springframework.ai/spring-ai-client-chat@1.0.7
purl pkg:maven/org.springframework.ai/spring-ai-client-chat@1.0.7
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-9jh9-s213-jbeu Spring AI's chat memory component contained a problematic default that, when not explicitly overridden, could result in unintended data exposure between users. CVE-2026-41712
GHSA-q62f-h9x2-gcqc
VCID-eg2m-qj98-rbdr A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an unintended way. Applications using the affected advisor with user-controlled input may be susceptible to manipulation of model behavior across conversation turns. CVE-2026-41713
GHSA-5852-phmh-8fhr