org.springframework.ai:spring-ai-client-chat

2 results · Feed

• High 8.2
  CVE-2026-41713

  Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisor

  A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an unintended way. Applications using the affected advisor with user-controlled input may be susceptible to manipulation of model behavior across co…

  VMware Spring AI org.springframework.ai:spring-ai-client-chat Maven
  May 12, 2026
• High 7.5
  CVE-2026-41712

  ChatMemory DEFAULT_CONVERSATION_ID causes unintended cross-user data leakage

  Spring AI's chat memory component contained a problematic default that, when not explicitly overridden, could result in unintended data exposure between users.

  VMware Spring AI org.springframework.ai:spring-ai-client-chat org.springframework.ai:spring-ai-advisors-vector-store Maven
  May 12, 2026