ca.uhn.hapi.example:restful-server-example (0.7), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=0.4, <=0.8) +52 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.1.3.release)

org.thymeleaf:thymeleaf MAVEN version 2.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - ca.uhn.hapi.example:restful-server-example 0.7 - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay =0.4, =1.0.0...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), best.skn:skn-spring-mail (>=1.0.0, <=2.4.0) +769 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf-spring6 (>=3.1.0.m1, <=3.1.3.release)

org.thymeleaf:thymeleaf-spring6 MAVEN version =3.1.0.m1, =1.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.6.0, =7.6.0, =7.0.0, =8.8.2 and more Source cves: CVE-2026-40478 Source advisory: OSV:GHSA-XJW8-8C5C-9R79...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24), au.org.consumerdatastandards:client-cli (>=1.1.1, <=2.4.1) +1482 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf-spring5 (>=3.0.9.release, <=3.1.3.release)

org.thymeleaf:thymeleaf-spring5 MAVEN version =3.0.9.release, =0.5.0, =1.1.1, =3.4.0, =5.6.5, =4.1.0, =4.1.0, =3.7.0, =3.7.0, =5.3.0, =6.2.0, =5.1.0, =6.8.0, =6.4.0, =5.3.0, =3.7.0, =5.5.7 and more Source cves: CVE-2026-40478 Source advisory: SNYK:JAVA-ORGTHYMELEAF-16078378...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), best.skn:skn-spring-mail (>=1.0.0, <=2.4.0) +769 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf-spring6 (>=3.1.0.m1, <=3.1.3.release)

org.thymeleaf:thymeleaf-spring6 MAVEN version =3.1.0.m1, =1.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.6.0, =7.6.0, =7.0.0, =8.8.2 and more Source cves: CVE-2026-40478 Source advisory: SNYK:JAVA-ORGTHYMELEAF-16078377...

org.thymeleaf:thymeleaf-spring3 (1.0.1) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (1.0.1)

org.thymeleaf:thymeleaf MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.0.1 Source cves: CVE-2026-40478 Source advisory: OSV:GHSA-XJW8-8C5C-9R79...

com.github.seratch:scalatra-thymeleaf-support_2.9.1 (>=1.0.0, <=2.0.1), com.github.seratch:scalatra-thymeleaf-support_2.9.2 (>=1.0.0, <=2.0.1) +3 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.0.8)

org.thymeleaf:thymeleaf MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - com.github.seratch:scalatra-thymeleaf-support2.9.1 =1.0.0, =1.0.0, =1.0.1, =1.0.2 - org.thymeleaf:thymeleaf-sprin...

com.datasift.client:datasift-java (>=3.0.0-beta1, <=3.1.0), com.github.dandelion:dandelion-thymeleaf (0.1.0) +20 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.0.15)

org.thymeleaf:thymeleaf MAVEN version 2.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - com.datasift.client:datasift-java =3.0.0-beta1, =0.8.4, =0.8.1, =1.1, =4.0.0, =0.0.1, =0.0.9, =0.0.1, =1.0.5,...

com.github.dandelion:dandelion-thymeleaf (>=0.2.0, <=0.2.1), com.github.dandelion:datatables-thymeleaf (>=0.8.8, <=0.8.14) +6 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.0.16)

org.thymeleaf:thymeleaf MAVEN version 2.0.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - com.github.dandelion:dandelion-thymeleaf =0.2.0, =0.8.8, =0.2.1, =1.0.0, =0.0.1, =2.0.0-beta1, =2.0.7 Source cve...

com.github.dandelion:datatables-thymeleaf (>=0.9.0, <=0.9.2), nz.net.ultraq.thymeleaf:thymeleaf-layout-dialect (>=1.1, <=1.1.3) +10 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.0.17)

org.thymeleaf:thymeleaf MAVEN version 2.0.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - com.github.dandelion:datatables-thymeleaf =0.9.0, =1.1, =3.0.0-ga, =3.0.0-ga, =3.0.0-ga, =3.0.0-ga, =3.0.0-ga,...

org.thymeleaf:thymeleaf-spring3 (1.1.1) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (1.1.1)

org.thymeleaf:thymeleaf MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.1.1 Source cves: CVE-2026-40478 Source advisory: OSV:GHSA-XJW8-8C5C-9R79...

org.thymeleaf:thymeleaf-spring3 (1.1.5) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (1.1.5)

org.thymeleaf:thymeleaf MAVEN version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.1.5 Source cves: CVE-2026-40478 Source advisory: OSV:GHSA-XJW8-8C5C-9R79...

org.thymeleaf:thymeleaf-spring3 (2.0.4) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.0.4)

org.thymeleaf:thymeleaf MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.4 Source cves: CVE-2026-40478 Source advisory: OSV:GHSA-XJW8-8C5C-9R79...

net.sourceforge.pagesdialect:pagesdialect-core (1.0.0-beta2), org.thymeleaf:thymeleaf-spring3 (2.0.6) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.0.6)

org.thymeleaf:thymeleaf MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - net.sourceforge.pagesdialect:pagesdialect-core 1.0.0-beta2 - org.thymeleaf:thymeleaf-spring3 2.0.6 Source cves:...

com.github.seratch:skinny-thymeleaf_2.10 (>=0.9.5, <=0.9.12), com.github.theborakompanioni:thymeleaf-extras-shiro (1.0.2) +7 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.0.18)

org.thymeleaf:thymeleaf MAVEN version 2.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - com.github.seratch:skinny-thymeleaf2.10 =0.9.5, =3.0.3-ga, =3.0.3-ga, =3.0.3-ga, =3.0.3-ga, =3.0.3-ga, =3.0.10-g...

com.github.wuic:wuic-thymeleaf (>=0.4.1.rc1, <=0.4.5), net.sourceforge.html5valdialect:html5valdialect (2.0.0) +2 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.0.19)

org.thymeleaf:thymeleaf MAVEN version 2.0.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - com.github.wuic:wuic-thymeleaf =0.4.1.rc1, =2.0.0, =2.0.2 - org.thymeleaf:thymeleaf-spring3 2.0.19 Source cves:...

com.connect-group:thymesheet (2.1.1), com.connect-group:thymesheet-spring3 (2.1.1) +7 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.1.1.release)

org.thymeleaf:thymeleaf MAVEN version 2.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - com.connect-group:thymesheet 2.1.1 - com.connect-group:thymesheet-spring3 2.1.1 -...

ca.uhn.hapi.fhir:hapi-fhir-osgi-core (>=1.4, <=1.6), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (>=0.9, <=1.6) +242 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.1.4.release)

org.thymeleaf:thymeleaf MAVEN version 2.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-osgi-core =1.4, =0.9, =1.4, =0.0.10, =4.0.0, =1.0.5, =1.0.0, =1.0.0.release,...

am.ik.home:uaa-server (>=1.0.0, <=1.9.0), ca.pjer:parse-security-spring-boot-starter (1.1.0) +109 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.1.5.release)

org.thymeleaf:thymeleaf MAVEN version 2.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - am.ik.home:uaa-server =1.0.0, =0.2.1, =0.2.11, =1.0.6.oss, =3.0.1.5, =3.0.0, =3.0.0, =1.1.0, =1.0.0,...

cc.catalysts.boot:cat-boot-thymeleaf (>=1.1.2, <=1.1.7), cc.catalysts.boot:cat-boot-thymeleaf2 (>=1.1.2, <=1.1.7) +63 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.1.6.release)

org.thymeleaf:thymeleaf MAVEN version 2.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - cc.catalysts.boot:cat-boot-thymeleaf =1.1.2, =1.1.2, =0.1.0, =4.0.4, =4.0.3, =4.0.3, =4.0.3, =4.0.3,...

org.thymeleaf:thymeleaf-spring3 (2.1.0-m1) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.1.0-m1)

org.thymeleaf:thymeleaf MAVEN version 2.1.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.1.0-m1 Source cves: CVE-2026-40478 Source advisory: OSV:GHSA-XJW8-8C5C-9R79...