An open API service providing security vulnerability metadata for many open source software ecosystems.

maven

org.thymeleaf:thymeleaf

maven

Modern server-side Java template engine for both web and standalone environments

View on github.com · View on repo1.maven.org

Security Advisories for org.thymeleaf:thymeleaf in maven

Critical
3 months ago

Sandboxed Thymeleaf expressions vulnerable to improper recognition of unauthorized syntax patterns GSA_kwCzR0hTQS1jOXBoLWd4d3ctNzc0NM4ABWJC

maven org.thymeleaf:thymeleaf-spring6, org.thymeleaf:thymeleaf-spring5, org.thymeleaf:thymeleaf
Critical
3 months ago

Improper neutralization of specific syntax patterns for unauthorized expressions in Thymeleaf GSA_kwCzR0hTQS14anc4LThjNWMtOXI3Oc4ABVVm

maven org.thymeleaf:thymeleaf-spring6, org.thymeleaf:thymeleaf-spring5, org.thymeleaf:thymeleaf
Critical
3 months ago

Improper restriction of the scope of accessible objects in Thymeleaf expressions GSA_kwCzR0hTQS1yNHY0LTVtd3ItMmZ3cs4ABVVl

maven org.thymeleaf:thymeleaf-spring6, org.thymeleaf:thymeleaf-spring5, org.thymeleaf:thymeleaf

Filter by Severity