{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1e6bc72a-eaf4-5de7-a342-4725c2cfe07f",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-ai-client-chat",
      "purl": "pkg:maven/org.springframework.ai/spring-ai-client-chat@1.1.8-tuxcare.1",
      "type": "library",
      "group": "org.springframework.ai",
      "bom-ref": "pkg:maven/org.springframework.ai/spring-ai-client-chat@1.1.8-tuxcare.1",
      "version": "1.1.8-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-ai-client-chat",
            "purl": "pkg:maven/org.springframework.ai/spring-ai-client-chat@1.1.8",
            "type": "library",
            "group": "org.springframework.ai",
            "version": "1.1.8"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-41712",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.ai/spring-ai-client-chat@1.1.8-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4a3c161c-01dc-52f0-93bb-b7507d3f1f99",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41712 does not affect version 1.1.8-tuxcare.1 of org.springframework.ai:spring-ai-client-chat. CVE-2026-41712 affects Spring AI 1.0.0-1.0.6 and 1.1.0-1.1.5, where chat memory advisors had a DEFAULT_CONVERSATION_ID constant (\"default\") that, if not explicitly overridden, caused all users to share the same conversation ID, resulting in cross-user data exposure. The target repository version 1.1.8 already contains the upstream fix (commit 13cde419e by Christian Tzolov) that was shipped in the Spring AI 1.1.8 release. The fix removes the DEFAULT_CONVERSATION_ID constant, eliminates the .conversationId() builder method, and requires explicit conversation ID on every call via the advisor context, throwing IllegalArgumentException if missing. This forces developers to provide unique conversation IDs per user/session, preventing the data exposure vulnerability.\n\nAdvisory cross-check (dlmn): outside the affected ranges of GitHub (< 1.0.7; >= 1.1.0-M1, < 1.1.6; >= 2.0.0-M1, < 2.0.0-M6; < 1.0.7; >= 1.1.0-M1, < 1.1.6; >= 2.0.0-M1, < 2.0.0-M6; < 1.0.7; >= 1.1.0-M1, < 1.1.6; >= 2.0.0-M1, < 2.0.0-M6), NVD (>= 1.0.0, < 1.0.7; >= 1.1.0, < 1.1.6), cve.org (>= 1.0.0, < 1.0.7; >= 1.1.0, < 1.1.6), Snyk (< 1.0.7; >= 1.1.0-M1, < 1.1.6; <= 0).",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-41713",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.ai/spring-ai-client-chat@1.1.8-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6b214b6c-2d66-56ae-a45a-63de38762d8c",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41713 does not affect version 1.1.8-tuxcare.1 of org.springframework.ai:spring-ai-client-chat. The target Spring AI 1.1.8 contains the upstream vendor's fix for CVE-2026-41713. The vulnerability allowed attackers to inject malicious instructions into conversation memory that would later manipulate model behavior. The fix implements four defenses: (1) XML entity escaping of user content before embedding in system prompts (escapeXmlChars/escapeXml methods); (2) wrapping memory entries in typed XML elements (<user>, <assistant>, <memory-entry>); (3) system prompt instructions declaring memory as historical data only; (4) mandatory conversation IDs preventing cross-session contamination. All defenses are present at HEAD (b6f30aa4a). Fixes authored by upstream (christian.tzolov@broadcom.com) in commits 917f62ebe and 13cde419e, shipped in release 1.1.8, which TuxCare onboarded via 91d00bb3a.\n\nAdvisory cross-check (dlmn): outside the affected ranges of GitHub (< 1.0.7; >= 1.1.0-M1, < 1.1.6), NVD (>= 1.0.0, < 1.0.7; >= 1.1.0, < 1.1.6), cve.org (>= 1.0.0, < 1.0.7; >= 1.1.0, < 1.1.6), Snyk (< 1.0.7; >= 1.1.0-M1, < 1.1.6; < 1.0.7; >= 1.1.0-M1, < 1.1.6; < 1.0.7; >= 1.1.0-M1, < 1.1.6; < 1.0.7; >= 1.1.0-M1, < 1.1.6).",
        "justification": "code_not_present"
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.ai/spring-ai-client-chat@1.1.8-tuxcare.1"
    }
  ]
}