Vulnerabilities of thymeleaf org.thymeleaf:thymeleaf-spring5
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-40478 | Thymeleaf is a server-side Java template engine for web and standalone environments | 9.1 Critical | Apr 17, 2026 |
| CVE-2026-40477 | Thymeleaf is a server-side Java template engine for web and standalone environments | 9.1 Critical | Apr 17, 2026 |