org.thymeleaf:thymeleaf-spring3 (1.1.0) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (1.1.0)

org.thymeleaf:thymeleaf MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.1.0 Source cves: CVE-2026-40478 Source advisory: OSV:GHSA-XJW8-8C5C-9R79...

org.thymeleaf:thymeleaf-spring3 (1.0.1) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (1.0.1)

org.thymeleaf:thymeleaf MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.0.1 Source cves: CVE-2026-40478 Source advisory: OSV:GHSA-XJW8-8C5C-9R79...

org.thymeleaf.extras:thymeleaf-extras-conditionalcomments (2.1.0-beta1), org.thymeleaf.extras:thymeleaf-extras-springsecurity3 (2.1.0-beta1) +3 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.1.0-beta1)

org.thymeleaf:thymeleaf MAVEN version 2.1.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf.extras:thymeleaf-extras-conditionalcomments 2.1.0-beta1 -...

org.thymeleaf:thymeleaf-spring3 (2.1.0-m1) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.1.0-m1)

org.thymeleaf:thymeleaf MAVEN version 2.1.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.1.0-m1 Source cves: CVE-2026-40478 Source advisory: OSV:GHSA-XJW8-8C5C-9R79...

org.thymeleaf:thymeleaf-spring3 (2.1.0-m3) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.1.0-m3)

org.thymeleaf:thymeleaf MAVEN version 2.1.0-m3 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.1.0-m3 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

org.thymeleaf:thymeleaf-spring3 (2.1.0-m2) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.1.0-m2)

org.thymeleaf:thymeleaf MAVEN version 2.1.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.1.0-m2 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

org.thymeleaf:thymeleaf-spring3 (2.0.7) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.7)

org.thymeleaf:thymeleaf MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.7 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

org.thymeleaf:thymeleaf-spring3 (1.1.4) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (1.1.4)

org.thymeleaf:thymeleaf MAVEN version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.1.4 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

org.thymeleaf:thymeleaf-spring3 (1.1.3) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (1.1.3)

org.thymeleaf:thymeleaf MAVEN version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.1.3 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

com.github.wuic:wuic-thymeleaf (>=0.4.1.rc1, <=0.4.5), net.sourceforge.html5valdialect:html5valdialect (2.0.0) +2 more potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.19)

org.thymeleaf:thymeleaf MAVEN version 2.0.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - com.github.wuic:wuic-thymeleaf =0.4.1.rc1, =2.0.0, =2.0.2 - org.thymeleaf:thymeleaf-spring3 2.0.19 Source cves:...

org.thymeleaf:thymeleaf-spring3 (1.0.0) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (1.0.0)

org.thymeleaf:thymeleaf MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.0.0 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...