thymeleaf org.thymeleaf:thymeleaf-spring6 vulnerabilities
2 published CVEs name thymeleaf org.thymeleaf:thymeleaf-spring6 among the affected products.
- 2Published CVEs2 of them scored
- 2Last 12 monthspublished in the last year
- 2Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-40478
Improper neutralization of specific syntax patterns for unauthorized expressions in Thymeleaf
thymeleaf · thymeleaf
Critical9.1 - CVE-2026-40477
Improper restriction of the scope of accessible objects in Thymeleaf expressions
thymeleaf · thymeleaf
Critical9.1