ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24), au.org.consumerdatastandards:client-cli (>=1.1.1, <=2.4.1) +1482 more potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf-spring5 (>=3.0.9.release, <=3.1.3.release)

org.thymeleaf:thymeleaf-spring5 MAVEN version =3.0.9.release, =0.5.0, =1.1.1, =3.4.0, =5.6.5, =4.1.0, =4.1.0, =3.7.0, =3.7.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.4.0, =5.3.0, =3.7.0, =5.5.7 and more Source cves: CVE-2026-41901 Source advisory: MEND:CVE-2026-41901...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24), au.org.consumerdatastandards:client-cli (>=1.1.1, <=2.4.1) +1482 more potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf-spring5 (>=3.0.9.release, <=3.1.3.release)

org.thymeleaf:thymeleaf-spring5 MAVEN version =3.0.9.release, =0.5.0, =1.1.1, =3.4.0, =5.6.5, =4.1.0, =4.1.0, =3.7.0, =3.7.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.4.0, =5.3.0, =3.7.0, =5.5.7 and more Source cves: CVE-2026-41901 Source advisory: OSV:GHSA-C9PH-GXWW-7744...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24), au.org.consumerdatastandards:client-cli (>=1.1.1, <=2.4.1) +1482 more potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf-spring5 (>=3.0.9.release, <=3.1.3.release)

org.thymeleaf:thymeleaf-spring5 MAVEN version =3.0.9.release, =0.5.0, =1.1.1, =3.4.0, =5.6.5, =4.1.0, =4.1.0, =3.7.0, =3.7.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.4.0, =5.3.0, =3.7.0, =5.5.7 and more Source cves: CVE-2026-41901 Source advisory: GHSA-C9PH-GXWW-7744...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24), au.org.consumerdatastandards:client-cli (>=1.1.1, <=2.4.1) +1482 more potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf-spring5 (>=3.0.9.release, <=3.1.3.release)

org.thymeleaf:thymeleaf-spring5 MAVEN version =3.0.9.release, =0.5.0, =1.1.1, =3.4.0, =5.6.5, =4.1.0, =4.1.0, =3.7.0, =3.7.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.4.0, =5.3.0, =3.7.0, =5.5.7 and more Source cves: CVE-2026-41901 Source advisory: SNYK:JAVA-ORGTHYMELEAF-16419368...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24), au.org.consumerdatastandards:client-cli (>=1.1.1, <=2.4.1) +1482 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf-spring5 (>=3.0.9.release, <=3.1.3.release)

org.thymeleaf:thymeleaf-spring5 MAVEN version =3.0.9.release, =0.5.0, =1.1.1, =3.4.0, =5.6.5, =4.1.0, =4.1.0, =3.7.0, =3.7.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.4.0, =5.3.0, =3.7.0, =5.5.7 and more Source cves: CVE-2026-40478 Source advisory: MEND:CVE-2026-40478...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24), au.org.consumerdatastandards:client-cli (>=1.1.1, <=2.4.1) +1482 more potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf-spring5 (>=3.0.9.release, <=3.1.3.release)

org.thymeleaf:thymeleaf-spring5 MAVEN version =3.0.9.release, =0.5.0, =1.1.1, =3.4.0, =5.6.5, =4.1.0, =4.1.0, =3.7.0, =3.7.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.4.0, =5.3.0, =3.7.0, =5.5.7 and more Source cves: CVE-2026-40477 Source advisory: MEND:CVE-2026-40477...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24), au.org.consumerdatastandards:client-cli (>=1.1.1, <=2.4.1) +1482 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf-spring5 (>=3.0.9.release, <=3.1.3.release)

org.thymeleaf:thymeleaf-spring5 MAVEN version =3.0.9.release, =0.5.0, =1.1.1, =3.4.0, =5.6.5, =4.1.0, =4.1.0, =3.7.0, =3.7.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.4.0, =5.3.0, =3.7.0, =5.5.7 and more Source cves: CVE-2026-40478 Source advisory: SNYK:JAVA-ORGTHYMELEAF-16078378...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24), au.org.consumerdatastandards:client-cli (>=1.1.1, <=2.4.1) +1482 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf-spring5 (>=3.0.9.release, <=3.1.3.release)

org.thymeleaf:thymeleaf-spring5 MAVEN version =3.0.9.release, =0.5.0, =1.1.1, =3.4.0, =5.6.5, =4.1.0, =4.1.0, =3.7.0, =3.7.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.4.0, =5.3.0, =3.7.0, =5.5.7 and more Source cves: CVE-2026-40478 Source advisory: OSV:GHSA-XJW8-8C5C-9R79...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24), au.org.consumerdatastandards:client-cli (>=1.1.1, <=2.4.1) +1482 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf-spring5 (>=3.0.9.release, <=3.1.3.release)

org.thymeleaf:thymeleaf-spring5 MAVEN version =3.0.9.release, =0.5.0, =1.1.1, =3.4.0, =5.6.5, =4.1.0, =4.1.0, =3.7.0, =3.7.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.4.0, =5.3.0, =3.7.0, =5.5.7 and more Source cves: CVE-2026-40478 Source advisory: GHSA-XJW8-8C5C-9R79...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24), au.org.consumerdatastandards:client-cli (>=1.1.1, <=2.4.1) +1482 more potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf-spring5 (>=3.0.9.release, <=3.1.3.release)

org.thymeleaf:thymeleaf-spring5 MAVEN version =3.0.9.release, =0.5.0, =1.1.1, =3.4.0, =5.6.5, =4.1.0, =4.1.0, =3.7.0, =3.7.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.4.0, =5.3.0, =3.7.0, =5.5.7 and more Source cves: CVE-2026-40477 Source advisory: SNYK:JAVA-ORGTHYMELEAF-16078371...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24), au.org.consumerdatastandards:client-cli (>=1.1.1, <=2.4.1) +1482 more potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf-spring5 (>=3.0.9.release, <=3.1.3.release)

org.thymeleaf:thymeleaf-spring5 MAVEN version =3.0.9.release, =0.5.0, =1.1.1, =3.4.0, =5.6.5, =4.1.0, =4.1.0, =3.7.0, =3.7.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.4.0, =5.3.0, =3.7.0, =5.5.7 and more Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24), au.org.consumerdatastandards:client-cli (>=1.1.1, <=2.4.1) +1482 more potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf-spring5 (>=3.0.9.release, <=3.1.3.release)

org.thymeleaf:thymeleaf-spring5 MAVEN version =3.0.9.release, =0.5.0, =1.1.1, =3.4.0, =5.6.5, =4.1.0, =4.1.0, =3.7.0, =3.7.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.4.0, =5.3.0, =3.7.0, =5.5.7 and more Source cves: CVE-2026-40477 Source advisory: GHSA-R4V4-5MWR-2FWR...

br.net.woodstock.rockframework:rockframework-struts (>=2.0.0, <=2.0.8), br.net.woodstock.rockframework:rockframework-web (>=1.2.1, <=3.0.1) +25 more potentially affected by CVE-2025-54656 via org.apache.struts:struts-extras (>=1.3.8, <=1.3.10)

org.apache.struts:struts-extras MAVEN version =1.3.8, =2.0.0, =1.2.1, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =2.1.1-rc1, =3.0-beta-1, =3.0.0 and more Source cves: CVE-2025-54656 Source advisory: OSV:GHSA-CX25-XG7C-XFM5...

CVE-2021-43466

In the thymeleaf-spring5:3.0.12 component, thymeleaf combined with specific scenarios in template injection may lead to remote code execution...

io.pebbletemplates:pebble-spring-boot-2-starter (2.6.0), io.pebbletemplates:pebble-spring-boot-starter (2.6.0) +8 more potentially affected by CVE-2025-1686 +1 more via io.pebbletemplates:pebble (2.6.0)

io.pebbletemplates:pebble MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.pebbletemplates:pebble and may be impacted: - io.pebbletemplates:pebble-spring-boot-2-starter 2.6.0 - io.pebbletemplates:pebble-spring-boot-starter 2.6.0 -...

Thymeleaf command injection vulnerability

Thymeleaf-Spring5 is an open source modern server-side Java template engine for web and standalone environments from the Thymeleaf team. A security vulnerability exists in Thymeleaf version 3.1.1.RELEASE and prior versions. An attacker can exploit the vulnerability to gain write access to...

io.pebbletemplates:pebble-spring-boot-2-starter (2.6.2), io.pebbletemplates:pebble-spring-boot-starter (2.6.2) +3 more potentially affected by CVE-2022-37767 via io.pebbletemplates:pebble (2.6.2)

io.pebbletemplates:pebble MAVEN version 2.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.pebbletemplates:pebble and may be impacted: - io.pebbletemplates:pebble-spring-boot-2-starter 2.6.2 - io.pebbletemplates:pebble-spring-boot-starter 2.6.2 -...

Template injection in thymeleaf-spring5

In the thymeleaf-spring5:3.0.12 component, thymeleaf combined with specific scenarios in template injection may lead to remote code execution...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24), au.org.consumerdatastandards:client-cli (>=1.1.1, <=2.2.0) +1086 more potentially affected by CVE-2021-43466 via org.thymeleaf:thymeleaf-spring5 (>=3.0.9.release, <=3.0.12.release)

org.thymeleaf:thymeleaf-spring5 MAVEN version =3.0.9.release, =0.5.0, =1.1.1, =3.7.0, =4.1.0, =4.1.0, =3.7.0, =3.7.0, =5.3.0, =5.1.0, =5.3.0, =3.7.0, =4.0.0, =3.7.0, =5.1.0, =5.6.5 and more Source cves: CVE-2021-43466 Source advisory: OSV:GHSA-QCJ6-JQRG-4WP2...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24), au.org.consumerdatastandards:client-cli (>=1.1.1, <=2.2.0) +1086 more potentially affected by CVE-2021-43466 via org.thymeleaf:thymeleaf-spring5 (>=3.0.9.release, <=3.0.12.release)

org.thymeleaf:thymeleaf-spring5 MAVEN version =3.0.9.release, =0.5.0, =1.1.1, =3.7.0, =4.1.0, =4.1.0, =3.7.0, =3.7.0, =5.3.0, =5.1.0, =5.3.0, =3.7.0, =4.0.0, =3.7.0, =5.1.0, =5.6.5 and more Source cves: CVE-2021-43466 Source advisory: GHSA-QCJ6-JQRG-4WP2...