CLSA-2026-1793463667

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793463667.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1793463667
Upstream
CVE (4)
Published
2026-10-31T17:21:08Z
Modified
2026-11-02T19:46:33Z
Summary
TuxCare security update for org.springframework.ai (4 CVEs)
Details

TuxCare rebuilt 3 org.springframework.ai packages to address 4 CVEs. Fixed in 1.0.9-tuxcare.1.

Affected packages

TuxCare:Maven
org.springframework.ai:spring-ai-model

Package

Name
org.springframework.ai:spring-ai-model
Purl
pkg:maven/org.springframework.ai/spring-ai-model

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.0.9
Fixed
1.0.9-tuxcare.1

Affected versions

1.*
1.0.9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793463667.json"
tuxcare 
{
    "base_version":  "1.0.9",
    "fixed_version":  "1.0.9-tuxcare.1"
}
org.springframework.ai:spring-ai-pdf-document-reader

Package

Name
org.springframework.ai:spring-ai-pdf-document-reader
Purl
pkg:maven/org.springframework.ai/spring-ai-pdf-document-reader

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.0.9
Fixed
1.0.9-tuxcare.1

Affected versions

1.*
1.0.9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793463667.json"
tuxcare 
{
    "base_version":  "1.0.9",
    "fixed_version":  "1.0.9-tuxcare.1"
}
org.springframework.ai:spring-ai-transformers

Package

Name
org.springframework.ai:spring-ai-transformers
Purl
pkg:maven/org.springframework.ai/spring-ai-transformers

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.0.9
Fixed
1.0.9-tuxcare.1

Affected versions

1.*
1.0.9

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793463667.json"
tuxcare 
{
    "base_version":  "1.0.9",
    "fixed_version":  "1.0.9-tuxcare.1"
}