org.springframework.ai:spring-ai-transformers vulnerabilities (Maven)

1 vulnerability.

• org.springframework.ai:spring-ai-transformers Maven Spring AI's ONNX model cache defaults to world-writable predictable /tmp directory CVE-2026-40979 Fix available 6.1 MediumApril 28, 2026