net.sourceforge.pagesdialect:pagesdialect-core (1.0.0-beta1), org.thymeleaf:thymeleaf-spring3 (2.0.5) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.5)

org.thymeleaf:thymeleaf MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - net.sourceforge.pagesdialect:pagesdialect-core 1.0.0-beta1 - org.thymeleaf:thymeleaf-spring3 2.0.5 Source cves:...

org.thymeleaf:thymeleaf-spring3 (1.1.4) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (1.1.4)

org.thymeleaf:thymeleaf MAVEN version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.1.4 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

org.thymeleaf:thymeleaf-spring3 (1.1.3) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (1.1.3)

org.thymeleaf:thymeleaf MAVEN version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.1.3 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

org.thymeleaf:thymeleaf-spring3 (2.1.0-m1) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.1.0-m1)

org.thymeleaf:thymeleaf MAVEN version 2.1.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.1.0-m1 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

com.github.dandelion:datatables-thymeleaf (>=0.9.0, <=0.9.2), nz.net.ultraq.thymeleaf:thymeleaf-layout-dialect (>=1.1, <=1.1.3) +10 more potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.17)

org.thymeleaf:thymeleaf MAVEN version 2.0.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - com.github.dandelion:datatables-thymeleaf =0.9.0, =1.1, =3.0.0-ga, =3.0.0-ga, =3.0.0-ga, =3.0.0-ga, =3.0.0-ga,...

com.github.dandelion:dandelion-thymeleaf (>=0.2.0, <=0.2.1), com.github.dandelion:datatables-thymeleaf (>=0.8.8, <=0.8.14) +6 more potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.16)

org.thymeleaf:thymeleaf MAVEN version 2.0.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - com.github.dandelion:dandelion-thymeleaf =0.2.0, =0.8.8, =0.2.1, =1.0.0, =0.0.1, =2.0.0-beta1, =2.0.7 Source cve...

net.sourceforge.html5valdialect:html5valdialect (>=1.0.0-beta1, <=1.0.0-beta3), net.sourceforge.pagesdialect:pagesdialect-core (1.0.0-beta4) +13 more potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.13)

org.thymeleaf:thymeleaf MAVEN version 2.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - net.sourceforge.html5valdialect:html5valdialect =1.0.0-beta1, =2.0.0-ga, =2.0.0-ga, =2.0.0-ga, =2.0.0-ga,...

com.github.wuic:wuic-thymeleaf (>=0.4.1.rc1, <=0.4.5), net.sourceforge.html5valdialect:html5valdialect (2.0.0) +2 more potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.19)

org.thymeleaf:thymeleaf MAVEN version 2.0.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - com.github.wuic:wuic-thymeleaf =0.4.1.rc1, =2.0.0, =2.0.2 - org.thymeleaf:thymeleaf-spring3 2.0.19 Source cves:...

com.github.seratch:skinny-thymeleaf_2.10 (>=0.9.5, <=0.9.12), com.github.theborakompanioni:thymeleaf-extras-shiro (1.0.2) +7 more potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.18)

org.thymeleaf:thymeleaf MAVEN version 2.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - com.github.seratch:skinny-thymeleaf2.10 =0.9.5, =3.0.3-ga, =3.0.3-ga, =3.0.3-ga, =3.0.3-ga, =3.0.3-ga, =3.0.10-g...

org.thymeleaf:thymeleaf-spring3 (1.0.0) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (1.0.0)

org.thymeleaf:thymeleaf MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.0.0 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24), au.org.consumerdatastandards:client-cli (>=1.1.1, <=2.2.0) +1086 more potentially affected by CVE-2021-43466 via org.thymeleaf:thymeleaf-spring5 (>=3.0.9.release, <=3.0.12.release)

org.thymeleaf:thymeleaf-spring5 MAVEN version =3.0.9.release, =0.5.0, =1.1.1, =3.7.0, =4.1.0, =4.1.0, =3.7.0, =3.7.0, =5.3.0, =5.1.0, =5.3.0, =3.7.0, =4.0.0, =3.7.0, =5.1.0, =5.6.5 and more Source cves: CVE-2021-43466 Source advisory: OSV:GHSA-QCJ6-JQRG-4WP2...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24), au.org.consumerdatastandards:client-cli (>=1.1.1, <=2.2.0) +1086 more potentially affected by CVE-2021-43466 via org.thymeleaf:thymeleaf-spring5 (>=3.0.9.release, <=3.0.12.release)

org.thymeleaf:thymeleaf-spring5 MAVEN version =3.0.9.release, =0.5.0, =1.1.1, =3.7.0, =4.1.0, =4.1.0, =3.7.0, =3.7.0, =5.3.0, =5.1.0, =5.3.0, =3.7.0, =4.0.0, =3.7.0, =5.1.0, =5.6.5 and more Source cves: CVE-2021-43466 Source advisory: GHSA-QCJ6-JQRG-4WP2...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24), au.org.consumerdatastandards:client-cli (>=1.1.1, <=2.2.0) +1086 more potentially affected by CVE-2021-43466 via org.thymeleaf:thymeleaf-spring5 (>=3.0.9.release, <=3.0.12.release)

org.thymeleaf:thymeleaf-spring5 MAVEN version =3.0.9.release, =0.5.0, =1.1.1, =3.7.0, =4.1.0, =4.1.0, =3.7.0, =3.7.0, =5.3.0, =5.1.0, =5.3.0, =3.7.0, =4.0.0, =3.7.0, =5.1.0, =5.6.5 and more Source cves: CVE-2021-43466 Source advisory: MEND:CVE-2021-43466...