org.thymeleaf:thymeleaf-spring3 (1.1.1) potentially affected by CVE-2026-41901 via org.thymeleaf:thymeleaf (1.1.1)

org.thymeleaf:thymeleaf MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.1.1 Source cves: CVE-2026-41901 Source advisory: OSV:GHSA-C9PH-GXWW-7744...