org.springframework.ai:spring-ai-advisors-vector-store vulnerabilities (Maven)

2 vulnerabilities.

• org.springframework.ai:spring-ai-advisors-vector-store Maven ChatMemory DEFAULT_CONVERSATION_ID causes unintended cross-user data leakage CVE-2026-41712 Fix available 7.5 HighMay 12, 2026
• org.springframework.ai:spring-ai-advisors-vector-store Maven VectorStoreChatMemoryAdvisor conversation scoping can lead to cross-tenant memory exfiltration CVE-2026-40966 Fix available 5.9 MediumApril 28, 2026