Описание
Spring AI Vulnerable to OOM by attacker-controlled PDF
In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when handled by ForkPDFLayoutTextStripper.
Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5)
Пакеты
Наименование
org.springframework.ai:spring-ai-pdf-document-reader
maven
Затронутые версииВерсия исправления
>= 1.0.0, < 1.0.6
1.0.6
Наименование
org.springframework.ai:spring-ai-pdf-document-reader
maven
Затронутые версииВерсия исправления
>= 1.1.0, < 1.1.5
1.1.5
Связанные уязвимости
CVSS3: 6.5
nvd
3 месяца назад
In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when handled by `ForkPDFLayoutTextStripper`. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5)