diff --git a/CHANGELOG.md b/CHANGELOG.md
index 88ee88b0..3da89e75 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,11 @@
 
 ### Fixed
 
+## [4.12.1] - 2026-03-16
+### Fixed
+- Fix CVE-2025-66614 in Java Springboot QS ([#1153](https://github.com/opendevstack/ods-quickstarters/pull/1153))
+
+
 ## [4.12.0] - 2026-03-02
 ### Changed
 - Add specific quickstarter versioning to e2e-spock-geb and e2e-etl-python ([#1148](https://github.com/opendevstack/ods-quickstarters/pull/1148))
diff --git a/be-java-springboot/Jenkinsfile b/be-java-springboot/Jenkinsfile
index db5fc4e6..27c3f4b6 100644
--- a/be-java-springboot/Jenkinsfile
+++ b/be-java-springboot/Jenkinsfile
@@ -21,7 +21,7 @@ odsQuickstarterPipeline(
 
   stage('Build spring project') {
     dir(context.targetDir) {
-      def springBootVersion = '4.0.0'
+      def springBootVersion = '4.0.3'
       echo "--- create spring boot (v${springBootVersion}) project via spring initializr ---"
 
       def springInitializrUrl = "https://start.spring.io/starter.tgz?" +