---
id: CVE-2026-47851
title: >-
  Analyzing a PDF with a deeply nested or cyclic table of contents can cause a
  StackOverflowError in the ingestion thread.

  Spring AI 2.0.0

  Spring AI 1.1.0 - 1.1.8

  Spring AI 1.0.0 - 1.0.9
summary: >-
  Analyzing a PDF with a deeply nested or cyclic table of contents can cause a
  StackOverflowError in the ingestion thread.

  Spring AI 2.0.0

  Spring AI 1.1.0 - 1.1.8

  Spring AI 1.0.0 - 1.0.9
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-674
vendor: vmware
product: spring_ai
affected:
  - 'spring_ai >= 1.0.0, < 1.0.10'
  - 'spring_ai >= 1.1.0, < 1.1.9'
  - 'spring_ai >= 2.0.0, < 2.0.0.1'
patched:
  - spring_ai 2.0.0.1
published: '2026-08-27'
updated: '2026-09-04'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-47851'
references:
  - url: 'https://spring.io/security/cve-2026-47851'
    label: security@vmware.com
tags:
  - nvd
epss: 0.00263
epssPercentile: 0.18374
ingestedAt: '2026-09-05T19:43:55.934Z'
---

## Overview

Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError in the ingestion thread.
Spring AI 2.0.0
Spring AI 1.1.0 - 1.1.8
Spring AI 1.0.0 - 1.0.9

## Affected

- `spring_ai >= 1.0.0, < 1.0.10`
- `spring_ai >= 1.1.0, < 1.1.9`
- `spring_ai >= 2.0.0, < 2.0.0.1`

## Remediation

Upgrade past the affected range:

- `spring_ai 2.0.0.1`