org.thymeleaf:thymeleaf-spring3 (2.0.21), org.thymeleaf:thymeleaf-spring4 (2.0.21) potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf (2.0.21)

org.thymeleaf:thymeleaf MAVEN version 2.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.21 - org.thymeleaf:thymeleaf-spring4 2.0.21 Source cves: CVE-2026-41901 Sour...

org.broadleafcommerce:broadleaf-common (>=3.0.11-ga, <=3.0.16-ga), org.broadleafcommerce:broadleaf-contentmanagement-module (>=3.0.11-ga, <=3.0.16-ga) +8 more potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf (2.0.20)

org.thymeleaf:thymeleaf MAVEN version 2.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.broadleafcommerce:broadleaf-common =3.0.11-ga, =3.0.11-ga, =3.0.11-ga, =3.0.11-ga, =3.0.11-ga, =2.0.8, =2.0....

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24) +3348 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (>=m1, <=3.1.3.release)

org.thymeleaf:thymeleaf MAVEN version =m1, =0.5.0, =1.0.0, =0.9.6, =0.9.6, =1.0.0, =0.0.1, =1.0.0, =1.0, =3.4.0, =5.6.5, =7.4.5 and more Source cves: CVE-2026-40478 Source advisory: MEND:CVE-2026-40478...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24), au.org.consumerdatastandards:client-cli (>=1.1.1, <=2.4.1) +1482 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf-spring5 (>=3.0.9.release, <=3.1.3.release)

org.thymeleaf:thymeleaf-spring5 MAVEN version =3.0.9.release, =0.5.0, =1.1.1, =3.4.0, =5.6.5, =4.1.0, =4.1.0, =3.7.0, =3.7.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.4.0, =5.3.0, =3.7.0, =5.5.7 and more Source cves: CVE-2026-40478 Source advisory: MEND:CVE-2026-40478...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), best.skn:skn-spring-mail (>=1.0.0, <=2.4.0) +769 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf-spring6 (>=3.1.0.m1, <=3.1.3.release)

org.thymeleaf:thymeleaf-spring6 MAVEN version =3.1.0.m1, =1.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.6.0, =7.6.0, =7.0.0, =8.8.2 and more Source cves: CVE-2026-40478 Source advisory: MEND:CVE-2026-40478...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24) +3348 more potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (>=m1, <=3.1.3.release)

org.thymeleaf:thymeleaf MAVEN version =m1, =0.5.0, =1.0.0, =0.9.6, =0.9.6, =1.0.0, =0.0.1, =1.0.0, =1.0, =3.4.0, =5.6.5, =7.4.5 and more Source cves: CVE-2026-40477 Source advisory: MEND:CVE-2026-40477...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), best.skn:skn-spring-mail (>=1.0.0, <=2.4.0) +769 more potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf-spring6 (>=3.1.0.m1, <=3.1.3.release)

org.thymeleaf:thymeleaf-spring6 MAVEN version =3.1.0.m1, =1.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.6.0, =7.6.0, =7.0.0, =8.8.2 and more Source cves: CVE-2026-40477 Source advisory: MEND:CVE-2026-40477...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24) +3048 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (>=3.0.0.alpha01, <=3.1.3.release)

org.thymeleaf:thymeleaf MAVEN version =3.0.0.alpha01, =0.5.0, =0.9.6, =0.9.6, =1.0.0, =0.0.1, =1.0.0, =1.0, =3.4.0, =5.6.5, =4.1.0, =4.1.0, =3.6.0, =5.2.1 and more Source cves: CVE-2026-40478 Source advisory: GHSA-XJW8-8C5C-9R79...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24) +3048 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (>=3.0.0.alpha01, <=3.1.3.release)

org.thymeleaf:thymeleaf MAVEN version =3.0.0.alpha01, =0.5.0, =0.9.6, =0.9.6, =1.0.0, =0.0.1, =1.0.0, =1.0, =3.4.0, =5.6.5, =4.1.0, =4.1.0, =3.6.0, =5.2.1 and more Source cves: CVE-2026-40478 Source advisory: SNYK:JAVA-ORGTHYMELEAF-16078379...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24), au.org.consumerdatastandards:client-cli (>=1.1.1, <=2.4.1) +1482 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf-spring5 (>=3.0.9.release, <=3.1.3.release)

org.thymeleaf:thymeleaf-spring5 MAVEN version =3.0.9.release, =0.5.0, =1.1.1, =3.4.0, =5.6.5, =4.1.0, =4.1.0, =3.7.0, =3.7.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.4.0, =5.3.0, =3.7.0, =5.5.7 and more Source cves: CVE-2026-40478 Source advisory: GHSA-XJW8-8C5C-9R79...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24) +3048 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (>=3.0.0.alpha01, <=3.1.3.release)

org.thymeleaf:thymeleaf MAVEN version =3.0.0.alpha01, =0.5.0, =0.9.6, =0.9.6, =1.0.0, =0.0.1, =1.0.0, =1.0, =3.4.0, =5.6.5, =4.1.0, =4.1.0, =3.6.0, =5.2.1 and more Source cves: CVE-2026-40478 Source advisory: OSV:GHSA-XJW8-8C5C-9R79...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24), au.org.consumerdatastandards:client-cli (>=1.1.1, <=2.4.1) +1482 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf-spring5 (>=3.0.9.release, <=3.1.3.release)

org.thymeleaf:thymeleaf-spring5 MAVEN version =3.0.9.release, =0.5.0, =1.1.1, =3.4.0, =5.6.5, =4.1.0, =4.1.0, =3.7.0, =3.7.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.4.0, =5.3.0, =3.7.0, =5.5.7 and more Source cves: CVE-2026-40478 Source advisory: OSV:GHSA-XJW8-8C5C-9R79...

org.thymeleaf:thymeleaf-spring3 (1.1.0) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (1.1.0)

org.thymeleaf:thymeleaf MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.1.0 Source cves: CVE-2026-40478 Source advisory: OSV:GHSA-XJW8-8C5C-9R79...

org.thymeleaf:thymeleaf-spring3 (2.0.3) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.0.3)

org.thymeleaf:thymeleaf MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.3 Source cves: CVE-2026-40478 Source advisory: OSV:GHSA-XJW8-8C5C-9R79...

net.sourceforge.pagesdialect:pagesdialect-core (1.0.0-beta1), org.thymeleaf:thymeleaf-spring3 (2.0.5) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.0.5)

org.thymeleaf:thymeleaf MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - net.sourceforge.pagesdialect:pagesdialect-core 1.0.0-beta1 - org.thymeleaf:thymeleaf-spring3 2.0.5 Source cves:...

nz.net.ultraq.web.thymeleaf:thymeleaf-layout-dialect (1.0.3), org.thymeleaf:thymeleaf-spring3 (2.0.11) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.0.11)

org.thymeleaf:thymeleaf MAVEN version 2.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - nz.net.ultraq.web.thymeleaf:thymeleaf-layout-dialect 1.0.3 - org.thymeleaf:thymeleaf-spring3 2.0.11 Source cves:...

net.sourceforge.html5valdialect:html5valdialect (>=1.0.0-beta1, <=1.0.0-beta3), net.sourceforge.pagesdialect:pagesdialect-core (1.0.0-beta4) +13 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.0.13)

org.thymeleaf:thymeleaf MAVEN version 2.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - net.sourceforge.html5valdialect:html5valdialect =1.0.0-beta1, =2.0.0-ga, =2.0.0-ga, =2.0.0-ga, =2.0.0-ga,...

org.thymeleaf.extras:thymeleaf-extras-conditionalcomments (2.1.0-beta1), org.thymeleaf.extras:thymeleaf-extras-springsecurity3 (2.1.0-beta1) +3 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.1.0-beta1)

org.thymeleaf:thymeleaf MAVEN version 2.1.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf.extras:thymeleaf-extras-conditionalcomments 2.1.0-beta1 -...

ch.mfrey.thymeleaf.extras.cache:thymeleaf-cache-dialect (>=1.0.0, <=1.0.1), ch.mfrey.thymeleaf.extras.with:thymeleaf-with-dialect (2.0.0) +11 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.1.0.release)

org.thymeleaf:thymeleaf MAVEN version 2.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - ch.mfrey.thymeleaf.extras.cache:thymeleaf-cache-dialect =1.0.0, =3.2.0.release, =2.1.0.release,...

com.connect-group:thymeleaf-extras (1.0), com.connect-group:thymeleaf-tdd (>=1.0.3, <=1.0.4) +72 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.1.2.release)

org.thymeleaf:thymeleaf MAVEN version 2.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - com.connect-group:thymeleaf-extras 1.0 - com.connect-group:thymeleaf-tdd =1.0.3, =2.1.2, =2.4.8, =2.4.8,...