org.sevensource.commons:html-email-service (0.1.0), org.thymeleaf.extras:thymeleaf-extras-springsecurity3 (1.0.0-beta2) +2 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.0.14)

org.thymeleaf:thymeleaf MAVEN version 2.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.sevensource.commons:html-email-service 0.1.0 - org.thymeleaf.extras:thymeleaf-extras-springsecurity3...

org.thymeleaf:thymeleaf-spring3 (1.0.0-beta4) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (1.0.0-beta4)

org.thymeleaf:thymeleaf MAVEN version 1.0.0-beta4 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.0.0-beta4 Source cves: CVE-2026-40478 Source advisory:...

org.thymeleaf:thymeleaf-spring3 (2.0.0) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.0.0)

org.thymeleaf:thymeleaf MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.0 Source cves: CVE-2026-40478 Source advisory: OSV:GHSA-XJW8-8C5C-9R79...

ai.aletyx.kogito:aletyx-kogito-addons-springboot-dev-console (10.2.0), best.skn:skn-spring-mail (>=1.0.0, <=2.4.0) +769 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf-spring6 (>=3.1.0.m1, <=3.1.3.release)

org.thymeleaf:thymeleaf-spring6 MAVEN version =3.1.0.m1, =1.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.6.0, =7.6.0, =7.0.0, =8.8.2 and more Source cves: CVE-2026-40478 Source advisory: GHSA-XJW8-8C5C-9R79...

org.thymeleaf:thymeleaf-spring3 (1.1.3) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (1.1.3)

org.thymeleaf:thymeleaf MAVEN version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.1.3 Source cves: CVE-2026-40478 Source advisory: OSV:GHSA-XJW8-8C5C-9R79...

org.thymeleaf:thymeleaf-spring3 (1.0.0-beta2) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (1.0.0-beta2)

org.thymeleaf:thymeleaf MAVEN version 1.0.0-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.0.0-beta2 Source cves: CVE-2026-40478 Source advisory:...

org.thymeleaf:thymeleaf-spring3 (2.0.2) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.0.2)

org.thymeleaf:thymeleaf MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.2 Source cves: CVE-2026-40478 Source advisory: OSV:GHSA-XJW8-8C5C-9R79...

org.thymeleaf:thymeleaf-spring3 (1.0.0-beta5) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (1.0.0-beta5)

org.thymeleaf:thymeleaf MAVEN version 1.0.0-beta5 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.0.0-beta5 Source cves: CVE-2026-40478 Source advisory:...

com.github.seratch:scalatra-thymeleaf-support_2.9.1 (>=1.0.0, <=2.0.1), com.github.seratch:scalatra-thymeleaf-support_2.9.2 (>=1.0.0, <=2.0.1) +3 more potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.0.8)

org.thymeleaf:thymeleaf MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - com.github.seratch:scalatra-thymeleaf-support2.9.1 =1.0.0, =1.0.0, =1.0.1, =1.0.2 - org.thymeleaf:thymeleaf-sprin...

org.thymeleaf:thymeleaf-spring3 (2.0.0-beta2) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.0.0-beta2)

org.thymeleaf:thymeleaf MAVEN version 2.0.0-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.0-beta2 Source cves: CVE-2026-40478 Source advisory:...

org.thymeleaf.extras:thymeleaf-extras-tiles2 (1.0.0-beta1), org.thymeleaf:thymeleaf-spring3 (2.0.10) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.0.10)

org.thymeleaf:thymeleaf MAVEN version 2.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf.extras:thymeleaf-extras-tiles2 1.0.0-beta1 - org.thymeleaf:thymeleaf-spring3 2.0.10 Source cves:...

org.thymeleaf:thymeleaf-spring3 (2.0.7) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.0.7)

org.thymeleaf:thymeleaf MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.7 Source cves: CVE-2026-40478 Source advisory: OSV:GHSA-XJW8-8C5C-9R79...

org.thymeleaf:thymeleaf-spring3 (2.0.1) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.0.1)

org.thymeleaf:thymeleaf MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.1 Source cves: CVE-2026-40478 Source advisory: OSV:GHSA-XJW8-8C5C-9R79...

org.thymeleaf:thymeleaf-spring3 (1.1.2) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (1.1.2)

org.thymeleaf:thymeleaf MAVEN version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.1.2 Source cves: CVE-2026-40478 Source advisory: OSV:GHSA-XJW8-8C5C-9R79...

org.thymeleaf:thymeleaf-spring3 (m1) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (m1)

org.thymeleaf:thymeleaf MAVEN version m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 m1 Source cves: CVE-2026-40478 Source advisory: OSV:GHSA-XJW8-8C5C-9R79...

Template Injection

Overview Affected versions of this package are vulnerable to Template Injection due to the TemplateEngine's improper invalidation of certain syntactic patterns during expression evaluation. An attacker can inject into sensitive objects to execute unauthorized actions. Remediation Upgrade...

org.thymeleaf:thymeleaf-spring3 (1.0.0-beta3) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (1.0.0-beta3)

org.thymeleaf:thymeleaf MAVEN version 1.0.0-beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 1.0.0-beta3 Source cves: CVE-2026-40478 Source advisory:...

Template Injection

Overview Affected versions of this package are vulnerable to Template Injection due to the TemplateEngine's improper invalidation of certain syntactic patterns during expression evaluation. An attacker can inject into sensitive objects to execute unauthorized actions. Remediation Upgrade...

org.thymeleaf:thymeleaf-spring3 (2.1.0-m2) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.1.0-m2)

org.thymeleaf:thymeleaf MAVEN version 2.1.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.1.0-m2 Source cves: CVE-2026-40478 Source advisory: OSV:GHSA-XJW8-8C5C-9R79...

org.thymeleaf:thymeleaf-spring3 (2.0.21), org.thymeleaf:thymeleaf-spring4 (2.0.21) potentially affected by CVE-2026-40478 via org.thymeleaf:thymeleaf (2.0.21)

org.thymeleaf:thymeleaf MAVEN version 2.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on org.thymeleaf:thymeleaf and may be impacted: - org.thymeleaf:thymeleaf-spring3 2.0.21 - org.thymeleaf:thymeleaf-spring4 2.0.21 Source cves: CVE-2026-40478 Sour...