com.alibaba.citrus:citrus-springext-all (>=3.1.6, <=3.2.4), com.alibaba.citrus:citrus-test-all (>=3.1.6, <=3.2.4) +62 more potentially affected by CVE-2026-41849 via org.springframework:spring-expression (3.2.7.release)

org.springframework:spring-expression MAVEN version 3.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.alibaba.citrus:citrus-springext-all =3.1.6, =3.1.6, =3.1.6, =0.10.0,...

com.payneteasy.superfly:superfly-web (>=1.2-1, <=1.4-3), org.codehaus.enunciate:enunciate-spring3-app-rt (>=1.20-rc1, <=1.31) +15 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (3.0.2.release)

org.springframework:spring-webmvc MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.payneteasy.superfly:superfly-web =1.2-1, =1.20-rc1, =1.6, =1.6, =1.6, =1.1.1,...

org.thymeleaf:thymeleaf-spring3 (2.1.0-m3) potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf (2.1.0-m3)

org.thymeleaf:thymeleaf MAVEN version 2.1.0-m3 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.1.0-m3 Source cves: CVE-2026-41901 Source advisory: OSV:GHSA-C9PH-GXWW-7744...

org.thymeleaf.extras:thymeleaf-extras-tiles2 (1.0.0-beta1), org.thymeleaf:thymeleaf-spring3 (2.0.10) potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf (2.0.10)

org.thymeleaf:thymeleaf MAVEN version 2.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf.extras:thymeleaf-extras-tiles2 1.0.0-beta1 - org.thymeleaf:thymeleaf-spring3 2.0.10 Source cves:...

nz.net.ultraq.web.thymeleaf:thymeleaf-layout-dialect (1.0.3), org.thymeleaf:thymeleaf-spring3 (2.0.11) potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf (2.0.11)

org.thymeleaf:thymeleaf MAVEN version 2.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - nz.net.ultraq.web.thymeleaf:thymeleaf-layout-dialect 1.0.3 - org.thymeleaf:thymeleaf-spring3 2.0.11 Source cves:...

org.thymeleaf:thymeleaf-spring3 (2.0.0-beta2) potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf (2.0.0-beta2)

org.thymeleaf:thymeleaf MAVEN version 2.0.0-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.0-beta2 Source cves: CVE-2026-41901 Source advisory:...

org.thymeleaf:thymeleaf-spring3 (2.0.21), org.thymeleaf:thymeleaf-spring4 (2.0.21) potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf (2.0.21)

org.thymeleaf:thymeleaf MAVEN version 2.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.21 - org.thymeleaf:thymeleaf-spring4 2.0.21 Source cves: CVE-2026-41901 Sour...

org.thymeleaf:thymeleaf-spring3 (2.0.2) potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf (2.0.2)

org.thymeleaf:thymeleaf MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.2 Source cves: CVE-2026-41901 Source advisory: OSV:GHSA-C9PH-GXWW-7744...

org.thymeleaf:thymeleaf-spring3 (2.0.4) potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf (2.0.4)

org.thymeleaf:thymeleaf MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.4 Source cves: CVE-2026-41901 Source advisory: OSV:GHSA-C9PH-GXWW-7744...

org.thymeleaf:thymeleaf-spring3 (2.0.0) potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf (2.0.0)

org.thymeleaf:thymeleaf MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.0 Source cves: CVE-2026-41901 Source advisory: OSV:GHSA-C9PH-GXWW-7744...

org.thymeleaf:thymeleaf-spring3 (1.0.0-beta3) potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf (1.0.0-beta3)

org.thymeleaf:thymeleaf MAVEN version 1.0.0-beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.0.0-beta3 Source cves: CVE-2026-41901 Source advisory:...

org.thymeleaf:thymeleaf-spring3 (2.1.0-m2) potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf (2.1.0-m2)

org.thymeleaf:thymeleaf MAVEN version 2.1.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.1.0-m2 Source cves: CVE-2026-41901 Source advisory: OSV:GHSA-C9PH-GXWW-7744...

org.thymeleaf:thymeleaf-spring3 (1.0.1) potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf (1.0.1)

org.thymeleaf:thymeleaf MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.0.1 Source cves: CVE-2026-41901 Source advisory: OSV:GHSA-C9PH-GXWW-7744...

org.thymeleaf:thymeleaf-spring3 (1.1.0) potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf (1.1.0)

org.thymeleaf:thymeleaf MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.1.0 Source cves: CVE-2026-41901 Source advisory: OSV:GHSA-C9PH-GXWW-7744...

org.thymeleaf:thymeleaf-spring3 (1.0.0-beta5) potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf (1.0.0-beta5)

org.thymeleaf:thymeleaf MAVEN version 1.0.0-beta5 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.0.0-beta5 Source cves: CVE-2026-41901 Source advisory:...

com.github.wuic:wuic-thymeleaf (>=0.4.1.rc1, <=0.4.5), net.sourceforge.html5valdialect:html5valdialect (2.0.0) +2 more potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf (2.0.19)

org.thymeleaf:thymeleaf MAVEN version 2.0.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - com.github.wuic:wuic-thymeleaf =0.4.1.rc1, =2.0.0, =2.0.2 - org.thymeleaf:thymeleaf-spring3 2.0.19 Source cves:...

org.thymeleaf:thymeleaf-spring3 (1.1.3) potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf (1.1.3)

org.thymeleaf:thymeleaf MAVEN version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.1.3 Source cves: CVE-2026-41901 Source advisory: OSV:GHSA-C9PH-GXWW-7744...

org.thymeleaf:thymeleaf-spring3 (2.0.3) potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf (2.0.3)

org.thymeleaf:thymeleaf MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.3 Source cves: CVE-2026-41901 Source advisory: OSV:GHSA-C9PH-GXWW-7744...

com.connect-group:thymesheet (2.1.1), com.connect-group:thymesheet-spring3 (2.1.1) +7 more potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf (2.1.1.release)

org.thymeleaf:thymeleaf MAVEN version 2.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - com.connect-group:thymesheet 2.1.1 - com.connect-group:thymesheet-spring3 2.1.1 -...

org.thymeleaf:thymeleaf-spring3 (2.0.1) potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf (2.0.1)

org.thymeleaf:thymeleaf MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.1 Source cves: CVE-2026-41901 Source advisory: OSV:GHSA-C9PH-GXWW-7744...