org.thymeleaf:thymeleaf-spring3 (2.0.9) potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf (2.0.9)

org.thymeleaf:thymeleaf MAVEN version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.9 Source cves: CVE-2026-41901 Source advisory: OSV:GHSA-C9PH-GXWW-7744...