CVE-2026-120316

http4k before 6.62.0.0-ee contains a path traversal vulnerability in ThymeleafTemplates Caching and HotReload that allows unauthenticated attackers to read files outside baseTemplateDir by supplying ../ segments in ViewModel.template values. Attackers can influence request-driven template selecti...

CVE-2026-120316 http4k before 6.62.0.0-ee Path Traversal via ThymeleafTemplates Template Resolution

http4k before 6.62.0.0-ee contains a path traversal vulnerability in ThymeleafTemplates Caching and HotReload that allows unauthenticated attackers to read files outside baseTemplateDir by supplying ../ segments in ViewModel.template values. Attackers can influence request-driven template selecti...

EUVD-2026-115005

http4k before 6.62.0.0-ee contains a path traversal vulnerability in ThymeleafTemplates Caching and HotReload that allows unauthenticated attackers to read files outside baseTemplateDir by supplying ../ segments in ViewModel.template values. Attackers can influence request-driven template selecti...

CVE-2026-120316

The http4k framework (versions before 6.62.0.0-ee ) is vulnerable to a path traversal vulnerability within the ThymeleafTemplates Caching and HotReload components. An unauthenticated attacker can provide ../ segments in ViewModel.template() values to influence request-driven template selection. T...