thymeleaf vulnerabilities
3 published CVEs name thymeleaf among the affected products.
- Published CVEs
- 3
- Last 12 months
- 3
- Critical
- 3
- Known exploited
- 0
Critical 3High 0Medium 0Low 0Not scored 0
Newest CVEs
- CVE-2026-41901
Thymeleaf: Improper recognition of unauthorized syntax patterns in sandboxed Thymeleaf expressions
thymeleaf · thymeleaf
Critical9.0 - CVE-2026-40478
Improper neutralization of specific syntax patterns for unauthorized expressions in Thymeleaf
thymeleaf · thymeleaf
Critical9.1 - CVE-2026-40477
Improper restriction of the scope of accessible objects in Thymeleaf expressions
thymeleaf · thymeleaf
Critical9.1