org.springframework.boot:spring-boot vulnerabilities (Red Hat Lightwell)

2 vulnerabilities.

• org.springframework.boot:spring-boot Red Hat Lightwell Spring Boot accepts predictable temp directory without ownership verification CVE-2026-40973 Fix available 7.0 HighApril 27, 2026
• org.springframework.boot:spring-boot Red Hat Lightwell Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed CVE-2025-22235 Public exploitFix available 7.3 HighApril 28, 2025