CVE-2025-66908

The Turms AI-Serving module (v0.10.0-SNAPSHOT and earlier) is vulnerable to improper file type validation within the OCR image upload functionality. The OcrController in turms-ai-serving/src/main/java/im/turms/ai/domain/ocr/controller/OcrController.java fails to properly enforce the @FormData(con...