{"id":"CLSA-2026-1793463667","summary":"TuxCare security update for org.springframework.ai (4 CVEs)","details":"TuxCare rebuilt 3 org.springframework.ai packages to address 4 CVEs. Fixed in 1.0.9-tuxcare.1.","modified":"2026-11-02T19:46:33.281908979Z","published":"2026-10-31T17:21:08Z","upstream":["CVE-2026-47851","CVE-2026-47852","CVE-2026-59294","CVE-2026-59318"],"affected":[{"package":{"name":"org.springframework.ai:spring-ai-model","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.springframework.ai/spring-ai-model"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.9"},{"fixed":"1.0.9-tuxcare.1"}]}],"versions":["1.0.9"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793463667.json","tuxcare":{"base_version":"1.0.9","fixed_version":"1.0.9-tuxcare.1"}}},{"package":{"name":"org.springframework.ai:spring-ai-pdf-document-reader","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.springframework.ai/spring-ai-pdf-document-reader"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.9"},{"fixed":"1.0.9-tuxcare.1"}]}],"versions":["1.0.9"],"database_specific":{"tuxcare":{"base_version":"1.0.9","fixed_version":"1.0.9-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793463667.json"}},{"package":{"name":"org.springframework.ai:spring-ai-transformers","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.springframework.ai/spring-ai-transformers"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.9"},{"fixed":"1.0.9-tuxcare.1"}]}],"versions":["1.0.9"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793463667.json","tuxcare":{"fixed_version":"1.0.9-tuxcare.1","base_version":"1.0.9"}}}],"schema_version":"1.9.2"}