TH
Product
thymeleaf
by thymeleaf · last CVE May 12, 2026
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 1Medium 0Low 0
Watch

Add thymeleaf to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-38286
7.5
1%
Jul 14
Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypass via crafted HTML
Affected: through 3.1.1
Showing 1