thymeleaf thymeleaf vulnerabilities

3 published CVEs name thymeleaf thymeleaf among the affected products.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 3
Critical: 3
Known exploited: 0

Critical 3High 0Medium 0Low 0Not scored 0

Newest CVEs

CVE-2026-41901
Thymeleaf: Improper recognition of unauthorized syntax patterns in sandboxed Thymeleaf expressions
thymeleaf · thymeleaf
Critical9.0
CVE-2026-40478
Improper neutralization of specific syntax patterns for unauthorized expressions in Thymeleaf
thymeleaf · thymeleaf
Critical9.1
CVE-2026-40477
Improper restriction of the scope of accessible objects in Thymeleaf expressions
thymeleaf · thymeleaf
Critical9.1

Most common weaknesses