pkg:Maven/org.thymeleaf:thymeleaf-spring5
4 total CVEsCRITICAL4
✅ Check your installed version
All known vulnerabilities
- from 0, < 3.0.13.RELEASE
- CRITICAL9.0CVE-2026-41901Sandboxed Thymeleaf expressions vulnerable to improper recognition of unauthorized syntax patternsfrom 0, < 3.1.5.RELEASE
- CRITICAL9.0CVE-2026-40478Improper neutralization of specific syntax patterns for unauthorized expressions in Thymeleaffrom 0, < 3.1.4.RELEASE
- CRITICAL9.0CVE-2026-40477Improper restriction of the scope of accessible objects in Thymeleaf expressionsfrom 0, < 3.1.4.RELEASE