org.thymeleaf:thymeleaf-spring3 (2.0.1) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.1)

org.thymeleaf:thymeleaf MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.1 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

com.github.seratch:scalatra-thymeleaf-support_2.9.1 (>=1.0.0, <=2.0.1), com.github.seratch:scalatra-thymeleaf-support_2.9.2 (>=1.0.0, <=2.0.1) +3 more potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.8)

org.thymeleaf:thymeleaf MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - com.github.seratch:scalatra-thymeleaf-support2.9.1 =1.0.0, =1.0.0, =1.0.1, =1.0.2 - org.thymeleaf:thymeleaf-sprin...

com.connect-group:thymesheet (2.1.0-beta2), net.sourceforge.html5valdialect:html5valdialect (>=2.1.0, <=2.1.2) +6 more potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.1.0-beta2)

org.thymeleaf:thymeleaf MAVEN version 2.1.0-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - com.connect-group:thymesheet 2.1.0-beta2 - net.sourceforge.html5valdialect:html5valdialect =2.1.0, =2.1.0,...

org.thymeleaf:thymeleaf-spring3 (1.1.0) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (1.1.0)

org.thymeleaf:thymeleaf MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.1.0 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

org.thymeleaf:thymeleaf-spring3 (1.0.1) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (1.0.1)

org.thymeleaf:thymeleaf MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.0.1 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

org.thymeleaf:thymeleaf-spring3 (2.0.0) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.0)

org.thymeleaf:thymeleaf MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.0 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

org.thymeleaf:thymeleaf-spring3 (2.0.21), org.thymeleaf:thymeleaf-spring4 (2.0.21) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.21)

org.thymeleaf:thymeleaf MAVEN version 2.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.21 - org.thymeleaf:thymeleaf-spring4 2.0.21 Source cves: CVE-2026-40477 Sour...

org.thymeleaf.extras:thymeleaf-extras-tiles2 (1.0.0-beta2), org.thymeleaf:thymeleaf-spring3 (2.0.12) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.12)

org.thymeleaf:thymeleaf MAVEN version 2.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf.extras:thymeleaf-extras-tiles2 1.0.0-beta2 - org.thymeleaf:thymeleaf-spring3 2.0.12 Source cves:...

com.github.wuic:wuic-thymeleaf (>=0.4.1.rc1, <=0.4.5), net.sourceforge.html5valdialect:html5valdialect (2.0.0) +2 more potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.19)

org.thymeleaf:thymeleaf MAVEN version 2.0.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - com.github.wuic:wuic-thymeleaf =0.4.1.rc1, =2.0.0, =2.0.2 - org.thymeleaf:thymeleaf-spring3 2.0.19 Source cves:...

org.thymeleaf:thymeleaf-spring3 (2.0.9) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.9)

org.thymeleaf:thymeleaf MAVEN version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.9 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

org.thymeleaf:thymeleaf-spring3 (1.1.1) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (1.1.1)

org.thymeleaf:thymeleaf MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.1.1 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

org.thymeleaf:thymeleaf-spring3 (2.0.2) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.2)

org.thymeleaf:thymeleaf MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.2 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

net.sourceforge.pagesdialect:pagesdialect-core (1.0.0-beta1), org.thymeleaf:thymeleaf-spring3 (2.0.5) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.5)

org.thymeleaf:thymeleaf MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - net.sourceforge.pagesdialect:pagesdialect-core 1.0.0-beta1 - org.thymeleaf:thymeleaf-spring3 2.0.5 Source cves:...

org.sevensource.commons:html-email-service (0.1.0), org.thymeleaf.extras:thymeleaf-extras-springsecurity3 (1.0.0-beta2) +2 more potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.14)

org.thymeleaf:thymeleaf MAVEN version 2.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.sevensource.commons:html-email-service 0.1.0 - org.thymeleaf.extras:thymeleaf-extras-springsecurity3...

net.sourceforge.html5valdialect:html5valdialect (>=1.0.0-beta1, <=1.0.0-beta3), net.sourceforge.pagesdialect:pagesdialect-core (1.0.0-beta4) +13 more potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.13)

org.thymeleaf:thymeleaf MAVEN version 2.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - net.sourceforge.html5valdialect:html5valdialect =1.0.0-beta1, =2.0.0-ga, =2.0.0-ga, =2.0.0-ga, =2.0.0-ga,...

org.thymeleaf:thymeleaf-spring3 (1.1.5) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (1.1.5)

org.thymeleaf:thymeleaf MAVEN version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.1.5 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

org.thymeleaf:thymeleaf-spring3 (1.1.2) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (1.1.2)

org.thymeleaf:thymeleaf MAVEN version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.1.2 Source cves: CVE-2026-40477 Source advisory: OSV:GHSA-R4V4-5MWR-2FWR...

org.thymeleaf.extras:thymeleaf-extras-tiles2 (1.0.0-beta1), org.thymeleaf:thymeleaf-spring3 (2.0.10) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (2.0.10)

org.thymeleaf:thymeleaf MAVEN version 2.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf.extras:thymeleaf-extras-tiles2 1.0.0-beta1 - org.thymeleaf:thymeleaf-spring3 2.0.10 Source cves:...

org.thymeleaf:thymeleaf-spring3 (1.0.0-beta3) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (1.0.0-beta3)

org.thymeleaf:thymeleaf MAVEN version 1.0.0-beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.0.0-beta3 Source cves: CVE-2026-40477 Source advisory:...

org.thymeleaf:thymeleaf-spring3 (1.0.0-beta5) potentially affected by CVE-2026-40477 via org.thymeleaf:thymeleaf (1.0.0-beta5)

org.thymeleaf:thymeleaf MAVEN version 1.0.0-beta5 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.0.0-beta5 Source cves: CVE-2026-40477 Source advisory:...