{"action":"Upgrade org.springframework.boot:spring-boot-autoconfigure to 3.5.15 (3.x) or 4.0.7 (4.x) or later.","affected":[{"fixed":"4.0.7","introduced":"4.0.0"},{"fixed":"3.5.15","introduced":"3.5.0"},{"introduced":"3.4.0","last_affected":"3.4.16"},{"introduced":"3.3.0","last_affected":"3.3.19"},{"introduced":"2.7.0","last_affected":"2.7.33"}],"component":"org.springframework.boot:spring-boot-autoconfigure","cve_ids":["CVE-2026-41001"],"ecosystem":"Maven","epss":0.00094,"exploited":false,"fixed_versions":["4.0.7","3.5.15"],"ghsa_id":"GHSA-ggg2-9786-hwc8","id":"tcs_01M5N8Y8B5EJ5YFM1HVSKCX281","modified_at":"2026-09-10T03:51:08.972811216Z","published_at":"2026-06-11T09:31:56Z","references":["https://osv.dev/vulnerability/GHSA-ggg2-9786-hwc8","https://nvd.nist.gov/vuln/detail/CVE-2026-41001","https://github.com/spring-projects/spring-boot/commit/4218bd76e934e5cf9e3fd3997c67b8a6b0d0c111","https://github.com/spring-projects/spring-boot","https://spring.io/security/cve-2026-41001"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-ggg2-9786-hwc8","url":"https://osv.dev/vulnerability/GHSA-ggg2-9786-hwc8"}],"summary":"Spring Boot: Predictable Temp Directory in Artemis Auto-configuration"}