org.thymeleaf:thymeleaf-spring3 (2.0.0) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.0)

org.thymeleaf:thymeleaf MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.0 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

org.thymeleaf:thymeleaf-spring3 (1.1.5) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (1.1.5)

org.thymeleaf:thymeleaf MAVEN version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.1.5 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

io.pebbletemplates:pebble-spring-boot-starter (2.5.1), io.pebbletemplates:pebble-spring3 (2.5.1) +1 more potentially affected by CVE-2025-1686 +1 more via io.pebbletemplates:pebble (2.5.1)

io.pebbletemplates:pebble MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.pebbletemplates:pebble and may be impacted: - io.pebbletemplates:pebble-spring-boot-starter 2.5.1 - io.pebbletemplates:pebble-spring3 2.5.1 -...

io.pebbletemplates:pebble-spring-boot-2-starter (2.6.0), io.pebbletemplates:pebble-spring-boot-starter (2.6.0) +8 more potentially affected by CVE-2025-1686 +1 more via io.pebbletemplates:pebble (2.6.0)

io.pebbletemplates:pebble MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.pebbletemplates:pebble and may be impacted: - io.pebbletemplates:pebble-spring-boot-2-starter 2.6.0 - io.pebbletemplates:pebble-spring-boot-starter 2.6.0 -...

com.alibaba.citrus:citrus-springext-all (>=3.1.6, <=3.2.4), com.alibaba.citrus:citrus-test-all (>=3.1.6, <=3.2.4) +62 more potentially affected by CVE-2024-38808 via org.springframework:spring-expression (3.2.7.release)

org.springframework:spring-expression MAVEN version 3.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-expression and may be impacted: - com.alibaba.citrus:citrus-springext-all =3.1.6, =3.1.6, =3.1.6, =0.10.0,...

io.pebbletemplates:pebble-spring-boot-2-starter (2.6.2), io.pebbletemplates:pebble-spring-boot-starter (2.6.2) +3 more potentially affected by CVE-2022-37767 via io.pebbletemplates:pebble (2.6.2)

io.pebbletemplates:pebble MAVEN version 2.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.pebbletemplates:pebble and may be impacted: - io.pebbletemplates:pebble-spring-boot-2-starter 2.6.2 - io.pebbletemplates:pebble-spring-boot-starter 2.6.2 -...

io.pebbletemplates:pebble-spring-boot-starter (2.5.0), io.pebbletemplates:pebble-spring3 (2.5.0) +1 more potentially affected by CVE-2022-37767 via io.pebbletemplates:pebble (2.5.0)

io.pebbletemplates:pebble MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.pebbletemplates:pebble and may be impacted: - io.pebbletemplates:pebble-spring-boot-starter 2.5.0 - io.pebbletemplates:pebble-spring3 2.5.0 -...

JEEBBS v3.0（最新版）漏洞来几发

简要描述： 为了写6对不住了,刚开始看源码. jeebbs 产品介绍 jeebbs是金磊科技推出的一款以社区为基础的论坛系统，系统采用SpringMVC3+Spring3+Hibernate3+Freemarker技术架构，功能丰富、操作简单，能与jeecms进行无缝整合，实现全站用户统一，门户网站首页轻松调用论坛数据，在用户体验方面能够更加自然的过渡，增加用户在站内应用的一站式服务用户体验。 详细说明： 1、注册： 邮箱逻辑验证漏洞： package com.jeecms.common.web.springmvc; public boolean ifMaxLength...