All products

Red Hat Fuse 7/thymeleaf

Red Hat · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Sandboxed Thymeleaf expressions vulnerable to improper recognition of unauthorized syntax patternsCVE-2026-41901 · GHSA-C9PH-GXWW-7744 org.thymeleaf:thymeleaf-spring5org.thymeleaf:thymeleaf-spring6 MavenRed Hat Critical Fix reported
Improper neutralization of specific syntax patterns for unauthorized expressions in ThymeleafCVE-2026-40478 · GHSA-XJW8-8C5C-9R79 org.thymeleaf:thymeleaf-spring5org.thymeleaf:thymeleaf-spring6 MavenRed Hat Critical Fix reported
Improper restriction of the scope of accessible objects in Thymeleaf expressionsCVE-2026-40477 · GHSA-R4V4-5MWR-2FWR org.thymeleaf:thymeleaf-spring5org.thymeleaf:thymeleaf-spring6 MavenRed Hat Critical Fix reported