- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3 · 3 critical
- Dependents
- 679
- Registry
- Maven Central
Advisories 3
- CVE-2026-41901Critical 9.0
Thymeleaf: Improper recognition of unauthorized syntax patterns in sandboxed Thymeleaf expressions
Affected: fixed in 3.1.5.RELEASE.
- CVE-2026-40478Critical 9.1
Improper neutralization of specific syntax patterns for unauthorized expressions in Thymeleaf
Affected: fixed in 3.1.4.RELEASE.
- CVE-2026-40477Critical 9.1
Improper restriction of the scope of accessible objects in Thymeleaf expressions
Affected: fixed in 3.1.4.RELEASE.