Spring AI ForkPDFLayoutTextStripper Memory Allocation Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in Spring AI versions 1.0.0 through 1.0.5 and 1.1.0 through 1.1.4. The issue arises when `ForkPDFLayoutTextStripper` processes a crafted PDF file, causing excessive memory allocation. This vulnerability affects applications that use `ForkPDFLayoutTextStripper` and accept user-supplied input to `DocumentReader`s.

Impact

Exploitation of this vulnerability leads to excessive memory consumption, causing applications to run out of memory and potentially terminate unexpectedly.

Remediation

Users should upgrade to Spring AI version 1.0.6 or 1.1.5, depending on their current version.