Vulnerabilities

In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when handled by `ForkPDFLayoutTextStripper`.

In Spring AI, having access to a shared environment can expose the ONNX model used by the application.

SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via crafted document IDs.

In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector store query languages.