All products

Red Hat Single Sign-On 7/thymeleaf-spring5

Red Hat · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Improper neutralization of specific syntax patterns for unauthorized expressions in ThymeleafCVE-2026-40478 · GHSA-XJW8-8C5C-9R79 org.thymeleaf:thymeleaf-spring5org.thymeleaf:thymeleaf-spring6 MavenRed Hat Critical Fix reported
Improper restriction of the scope of accessible objects in Thymeleaf expressionsCVE-2026-40477 · GHSA-R4V4-5MWR-2FWR org.thymeleaf:thymeleaf-spring5org.thymeleaf:thymeleaf-spring6 MavenRed Hat Critical Fix reported