Maven package
org.springframework.ai/spring-ai-transformers
pkg:maven/org.springframework.ai/spring-ai-transformers
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-40979 | Med | 6.1 | >= 1.0.0, < 1.0.6 | 1.0.6 | Apr 28, 2026 | In Spring AI, having access to a shared environment can expose the ONNX model used by the application. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5) |
- affected >= 1.0.0, < 1.0.6fixed 1.0.6
In Spring AI, having access to a shared environment can expose the ONNX model used by the application. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5)