org.thymeleaf.extras:thymeleaf-extras-tiles2 (1.0.0-beta2), org.thymeleaf:thymeleaf-spring3 (2.0.12) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.12)

org.thymeleaf:thymeleaf MAVEN version 2.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf.extras:thymeleaf-extras-tiles2 1.0.0-beta2 - org.thymeleaf:thymeleaf-spring3 2.0.12 Source cves:...

org.thymeleaf.extras:thymeleaf-extras-conditionalcomments (2.1.0-beta1), org.thymeleaf.extras:thymeleaf-extras-springsecurity3 (2.1.0-beta1) +3 more potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.1.0-beta1)

org.thymeleaf:thymeleaf MAVEN version 2.1.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf.extras:thymeleaf-extras-conditionalcomments 2.1.0-beta1 -...

org.thymeleaf:thymeleaf-spring3 (2.1.0-m2) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.1.0-m2)

org.thymeleaf:thymeleaf MAVEN version 2.1.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.1.0-m2 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

org.thymeleaf:thymeleaf-spring3 (1.1.4) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (1.1.4)

org.thymeleaf:thymeleaf MAVEN version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.1.4 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

org.thymeleaf:thymeleaf-spring3 (1.1.5) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (1.1.5)

org.thymeleaf:thymeleaf MAVEN version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.1.5 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

org.thymeleaf:thymeleaf-spring3 (2.0.0-beta1) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.0-beta1)

org.thymeleaf:thymeleaf MAVEN version 2.0.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.0-beta1 Source cves: CVE-2026-40477 Source advisory:...

org.thymeleaf:thymeleaf-spring3 (2.0.0) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.0)

org.thymeleaf:thymeleaf MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.0 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

org.thymeleaf:thymeleaf-spring3 (2.0.1) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.1)

org.thymeleaf:thymeleaf MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.1 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

org.thymeleaf:thymeleaf-spring3 (2.0.2) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.2)

org.thymeleaf:thymeleaf MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.2 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

com.github.seratch:scalatra-thymeleaf-support_2.9.1 (>=1.0.0, <=2.0.1), com.github.seratch:scalatra-thymeleaf-support_2.9.2 (>=1.0.0, <=2.0.1) +3 more potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.8)

org.thymeleaf:thymeleaf MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - com.github.seratch:scalatra-thymeleaf-support2.9.1 =1.0.0, =1.0.0, =1.0.1, =1.0.2 - org.thymeleaf:thymeleaf-sprin...

org.thymeleaf.extras:thymeleaf-extras-tiles2 (1.0.0-beta1), org.thymeleaf:thymeleaf-spring3 (2.0.10) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.10)

org.thymeleaf:thymeleaf MAVEN version 2.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf.extras:thymeleaf-extras-tiles2 1.0.0-beta1 - org.thymeleaf:thymeleaf-spring3 2.0.10 Source cves:...

org.thymeleaf:thymeleaf-spring3 (2.0.21), org.thymeleaf:thymeleaf-spring4 (2.0.21) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.21)

org.thymeleaf:thymeleaf MAVEN version 2.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.21 - org.thymeleaf:thymeleaf-spring4 2.0.21 Source cves: CVE-2026-40477 Sour...

org.thymeleaf:thymeleaf-spring3 (2.1.0-m3) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.1.0-m3)

org.thymeleaf:thymeleaf MAVEN version 2.1.0-m3 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.1.0-m3 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

org.thymeleaf:thymeleaf-spring3 (2.0.4) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.4)

org.thymeleaf:thymeleaf MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.4 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

io.pebbletemplates:pebble-spring-boot-2-starter (2.6.0), io.pebbletemplates:pebble-spring-boot-starter (2.6.0) +8 more potentially affected by CVE-2025-1686 +1 more via io.pebbletemplates:pebble (2.6.0)

io.pebbletemplates:pebble MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.pebbletemplates:pebble and may be impacted: - io.pebbletemplates:pebble-spring-boot-2-starter 2.6.0 - io.pebbletemplates:pebble-spring-boot-starter 2.6.0 -...

io.pebbletemplates:pebble-spring-boot-starter (2.5.1), io.pebbletemplates:pebble-spring3 (2.5.1) +1 more potentially affected by CVE-2025-1686 +1 more via io.pebbletemplates:pebble (2.5.1)

io.pebbletemplates:pebble MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.pebbletemplates:pebble and may be impacted: - io.pebbletemplates:pebble-spring-boot-starter 2.5.1 - io.pebbletemplates:pebble-spring3 2.5.1 -...

com.alibaba.citrus:citrus-springext-all (>=3.1.6, <=3.2.4), com.alibaba.citrus:citrus-test-all (>=3.1.6, <=3.2.4) +62 more potentially affected by CVE-2024-38808 via org.springframework:spring-expression (3.2.7.release)

org.springframework:spring-expression MAVEN version 3.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.alibaba.citrus:citrus-springext-all =3.1.6, =3.1.6, =3.1.6, =0.10.0,...

io.pebbletemplates:pebble-spring-boot-2-starter (2.6.2), io.pebbletemplates:pebble-spring-boot-starter (2.6.2) +3 more potentially affected by CVE-2022-37767 via io.pebbletemplates:pebble (2.6.2)

io.pebbletemplates:pebble MAVEN version 2.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.pebbletemplates:pebble and may be impacted: - io.pebbletemplates:pebble-spring-boot-2-starter 2.6.2 - io.pebbletemplates:pebble-spring-boot-starter 2.6.2 -...

io.pebbletemplates:pebble-spring-boot-starter (2.5.0), io.pebbletemplates:pebble-spring3 (2.5.0) +1 more potentially affected by CVE-2022-37767 via io.pebbletemplates:pebble (2.5.0)

io.pebbletemplates:pebble MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.pebbletemplates:pebble and may be impacted: - io.pebbletemplates:pebble-spring-boot-starter 2.5.0 - io.pebbletemplates:pebble-spring3 2.5.0 -...

org.apache.cxf.fediz.systests.webapps:fediz-systests-webapps-spring3 (>=1.4.0, <=1.4.2), org.apache.cxf.fediz:apache-fediz (>=1.4.1, <=1.4.2) potentially affected by CVE-2017-12631 via org.apache.cxf.fediz:fediz-spring3 (>=1.4.0, <=1.4.2)

org.apache.cxf.fediz:fediz-spring3 MAVEN version =1.4.0, =1.4.0, =1.4.1, =1.4.2 Source cves: CVE-2017-12631 Source advisory: GHSA-FV7X-4HPC-HF9F...