Threats tagged 'ghsa-26gg-9gv2-v27j'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.5	CVE-2026-40980Org.springframework.ai:spring ai pdf document reader: Spring AI Vulnerable to OOM by attacker-controlled PDF Medium6.52026-04-28GCVE DatabaseCVE-2026-40980 A vulnerability in Spring AI's PDF document reader component allows an attacker to craft a malicious PDF that triggers excessive memory allocation during processing by the ForkPDFLayoutTextStripper class. This can lead to an out-of-memory (OOM) condition causing denial of service. The issue affects Spring AI versions 1.0.0 through 1.0.5 and 1.1.0 through 1.1.4. Fixed versions 1.0.6 and 1.1.5 address this problem. Report on CVE-2026-40980 Vulnerability CWE-400 #ghsa-26gg-9gv2-v27j #maven	GCVE Database	2026-04-28

Page 1 of 1