{"id":"CVE-2023-38286","aliases":["CLSA-2025-1752019357","CLSA-2025-1764029254","EUVD-2023-1989","GHSA-7gj7-224w-vpr3","RHLW-2026-81384c14bc892e51"],"status":"published","title":"Spring-boot-admin sandbox bypass via crafted HTML","description":"Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier is enabled and there is write access to environment variables via the UI.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00966,"percentile":0.61963,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-77"],"published":"2023-07-14T00:00:00Z","modified":"2026-10-28T02:30:55Z","fixes":[{"ecosystem":"Maven","package":"de.codecentric:spring-boot-admin-server","fixed_in":["3.1.2","2.7.16"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:Maven","package":"org.thymeleaf:thymeleaf","fixed_in":["3.0.15.RELEASE.tuxcare.1"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:org.springframework.boot.gradle.plugin","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-actuator","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-actuator-autoconfigure","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-antlib","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-autoconfigure","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-autoconfigure-processor","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-buildpack-platform","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-cli","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-configuration-metadata","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-configuration-processor","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-dependencies","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-devtools","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-gradle-plugin","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-jarmode-layertools","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-loader","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-loader-tools","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-maven-plugin","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-parent","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-properties-migrator","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-activemq","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-actuator","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-amqp","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-aop","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-artemis","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-batch","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-cache","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-cassandra","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-cassandra-reactive","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-couchbase","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-couchbase-reactive","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-elasticsearch","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-jdbc","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-jpa","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-ldap","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-mongodb","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-mongodb-reactive","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-neo4j","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-r2dbc","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-redis","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-redis-reactive","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-rest","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-freemarker","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-graphql","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-groovy-templates","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-hateoas","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-integration","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-jdbc","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-jersey","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-jetty","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-jooq","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-json","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-jta-atomikos","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-log4j2","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-logging","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-mail","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-mustache","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-oauth2-client","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-oauth2-resource-server","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-parent","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-quartz","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-reactor-netty","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-rsocket","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-security","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-test","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-thymeleaf","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-tomcat","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-undertow","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-validation","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-web","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-web-services","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-webflux","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-websocket","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-test","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-test-autoconfigure","fixed_in":["2.7.18-tuxcare.10"],"sources":["osv"]},{"ecosystem":"Red Hat Lightwell:Maven","package":"org.thymeleaf:thymeleaf","fixed_in":["3.0.15.RELEASE-rhlw-00003"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"de.codecentric:spring-boot-admin-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.2"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"de.codecentric:spring-boot-admin-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.thymeleaf:thymeleaf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.15.RELEASE"},{"fixed":"3.0.15.RELEASE.tuxcare.1"}]}],"versions":["3.0.15.RELEASE","3.0.15.RELEASE-tuxcare.2"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:org.springframework.boot.gradle.plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-actuator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-actuator-autoconfigure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-antlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-autoconfigure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-autoconfigure-processor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-buildpack-platform","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-configuration-metadata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-configuration-processor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-dependencies","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-devtools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-gradle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-jarmode-layertools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-loader","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-loader-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-maven-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-properties-migrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-activemq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-actuator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-amqp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-aop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-batch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-cassandra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-cassandra-reactive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-couchbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-couchbase-reactive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-elasticsearch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-jpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-mongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-mongodb-reactive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-neo4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-r2dbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-redis-reactive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-data-rest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-freemarker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-groovy-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-hateoas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-jersey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-jetty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-jooq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-jta-atomikos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-log4j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-mustache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-oauth2-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-oauth2-resource-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-quartz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-reactor-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-rsocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-thymeleaf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-tomcat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-validation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-web-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-starter-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.boot:spring-boot-test-autoconfigure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.18"},{"fixed":"2.7.18-tuxcare.10"}]}],"versions":["2.7.18","2.7.18-tuxcare.8","2.7.18.tuxcare","2.7.18.tuxcare.1","2.7.18.tuxcare.2","2.7.18.tuxcare.3","2.7.18.tuxcare.4","2.7.18.tuxcare.5","2.7.18.tuxcare.6","2.7.18.tuxcare.7"]},{"source":"osv","ecosystem":"Maven","package":"de.codecentric:spring-boot-admin-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.2"}]}],"versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.1.0","3.1.1"]},{"source":"osv","ecosystem":"Maven","package":"de.codecentric:spring-boot-admin-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16"}]}],"versions":["1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.2.0","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.3.2","1.3.3","1.3.4","1.3.5","1.3.6","1.3.7","1.4.0","1.4.1","1.4.2","1.4.3","1.4.4","1.4.5","1.4.6","1.5.0","1.5.1","1.5.2","1.5.3","1.5.4","1.5.5","1.5.6","1.5.7","2.0.0","2.0.1","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.1.0","2.1.1","2.1.2","2.1.3","2.1.4","2.1.5","2.1.6","2.2.0","2.2.1","2.2.2","2.2.3","2.2.4","2.3.0","2.3.1","2.4.0","2.4.1","2.4.2","2.4.3","2.4.4","2.5.0","2.5.1","2.5.2","2.5.3","2.5.4","2.5.5","2.5.6","2.6.0","2.6.1","2.6.10","2.6.11","2.6.2","2.6.3","2.6.4","2.6.5","2.6.6","2.6.7","2.6.8","2.6.9","2.7.0","2.7.1","2.7.10","2.7.11","2.7.12","2.7.13","2.7.14","2.7.15","2.7.2","2.7.3","2.7.4","2.7.5","2.7.6","2.7.7","2.7.8","2.7.9"]},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"org.thymeleaf:thymeleaf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.15.RELEASE-rhlw-00003"}]}],"versions":["1.0.0","1.0.0-beta1","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-beta5","1.0.1","1.1.0","1.1.1","1.1.2","1.1.3","1.1.4","1.1.5","2.0.0","2.0.0-beta1","2.0.0-beta2","2.0.1","2.0.10","2.0.11","2.0.12","2.0.13","2.0.14","2.0.15","2.0.16","2.0.17","2.0.18","2.0.19","2.0.2","2.0.20","2.0.21","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.0.8","2.0.9","2.1.0-beta1","2.1.0-beta2","2.1.0-m1","2.1.0-m2","2.1.0-m3","2.1.0.RELEASE","2.1.1.RELEASE","2.1.2.RELEASE","2.1.3.RELEASE","2.1.4.RELEASE","2.1.5.RELEASE","2.1.6.RELEASE","3.0.0.ALPHA01","3.0.0.ALPHA02","3.0.0.ALPHA03","3.0.0.BETA01","3.0.0.BETA02","3.0.0.BETA03","3.0.0.RELEASE","3.0.1.RELEASE","3.0.10.RELEASE","3.0.11.RELEASE","3.0.12.RELEASE","3.0.13.RELEASE","3.0.14.RELEASE","3.0.15.RELEASE","3.0.2.RELEASE","3.0.3.RELEASE","3.0.4.RELEASE","3.0.5.RELEASE","3.0.6.RELEASE","3.0.7.RELEASE","3.0.8.RELEASE","3.0.9.RELEASE","m1"]}],"products":[{"vendor":"codecentric","product":"spring_boot_admin"},{"vendor":"thymeleaf","product":"thymeleaf"}],"references":[{"url":"https://github.com/p1n93r/SpringBootAdmin-thymeleaf-SSTI","tags":["x_transferred","Exploit","package","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38286","tags":["advisory"]},{"url":"https://github.com/codecentric/spring-boot-admin/issues/2613","tags":["web"]},{"url":"https://github.com/codecentric/spring-boot-admin/pull/2615","tags":["web"]},{"url":"https://github.com/codecentric/spring-boot-admin/commit/f1f6ac6f613e1c0afc121c8989f28b4155a6797a","tags":["web"]},{"url":"https://github.com/codecentric/spring-boot-admin/commit/f1f6ac6f613e1c0afc121c8989f28b4155a6797a#diff-1ea8b144c29588e08221597d56d8be10b4b4a210f248a83f2e837152a3d2e0d7","tags":["web"]},{"url":"https://github.com/codecentric/spring-boot-admin/blob/master/spring-boot-admin-server/pom.xml","tags":["web"]},{"url":"https://github.com/thymeleaf/thymeleaf/issues/966","tags":["web"]},{"url":"https://github.com/advisories/GHSA-7gj7-224w-vpr3","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/38xxx/CVE-2023-38286.json","tags":["advisory"]},{"url":"https://github.com/codecentric/spring-boot-admin","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2023-38286","description":"Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier is enabled and there is write access to environment variables via the UI.","status":"published","published":"2023-07-14T00:00:00Z","modified":"2024-10-30T16:01:10.933Z","updated_at":"2026-11-02T14:35:30.116696Z"}],"euvd":[{"id":"EUVD-2023-1989","description":"Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier is enabled and there is write access to environment variables via the UI.","status":"published","published":"2023-07-14T00:00:00Z","modified":"2024-10-30T16:01:10Z","updated_at":"2026-11-03T00:05:14.330068Z"}],"ghsa":[{"id":"GHSA-7gj7-224w-vpr3","title":"Spring-boot-admin sandbox bypass via crafted HTML","description":"Thymeleaf through 3.1.1.RELEASE as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 allows for a sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier is enabled and there is write access to environment variables via the UI.\n\nSpring Boot Admin 3.1.2 and 2.7.16 contain mitigations for the issue. This bypass is achived via a library called Thymeleaf which has added counter measures for this sort of bypass in version `3.1.2.RELEASE` which has explicity forbidden static access to `org.springframework.util` in expressions. Thymeleaf itself should not be considered vulnerable.","status":"published","published":"2023-07-14T06:31:00Z","modified":"2024-06-12T22:40:52Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:37:54.624184Z"}],"nvd":[{"id":"CVE-2023-38286","description":"Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier is enabled and there is write access to environment variables via the UI.","status":"published","published":"2023-07-14T05:15:09.627Z","modified":"2026-06-17T06:09:49.13Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:08:15.91037Z"}],"osv":[{"id":"GHSA-7gj7-224w-vpr3","title":"Spring-boot-admin sandbox bypass via crafted HTML","description":"Thymeleaf through 3.1.1.RELEASE as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 allows for a sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier is enabled and there is write access to environment variables via the UI.\n\nSpring Boot Admin 3.1.2 and 2.7.16 contain mitigations for the issue. This bypass is achived via a library called Thymeleaf which has added counter measures for this sort of bypass in version `3.1.2.RELEASE` which has explicity forbidden static access to `org.springframework.util` in expressions. Thymeleaf itself should not be considered vulnerable.","status":"published","published":"2023-07-14T06:31:00Z","modified":"2024-06-12T23:03:09.401389Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T15:46:41.002603Z"},{"id":"CLSA-2025-1752019357","title":"TuxCare security update for org.thymeleaf:thymeleaf (1 CVE)","description":"TuxCare rebuilt org.thymeleaf:thymeleaf to address 1 CVE. Fixed in 3.0.15.RELEASE.tuxcare.1.","status":"published","published":"2026-08-04T14:52:04Z","modified":"2026-10-15T09:45:05.41379183Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1764029254","title":"TuxCare security update for org.springframework.boot (1 CVE)","description":"TuxCare rebuilt 76 org.springframework.boot packages to address 1 CVE. Fixed in 2.7.18-tuxcare.10.","status":"published","published":"2026-08-04T14:52:06Z","modified":"2026-10-15T09:46:14.490101255Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CVE-2023-38286","description":"Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier is enabled and there is write access to environment variables via the UI.","status":"published","published":"2023-07-14T00:00:00Z","modified":"2026-10-28T02:30:55.347062137Z","updated_at":"2026-11-02T15:44:32.922049Z"},{"id":"RHLW-2026-81384c14bc892e51","title":"Lightwell Security Advisory: thymeleaf 3.0.15.RELEASE-rhlw-00003","description":"Red Hat Lightwell has released org.thymeleaf:thymeleaf 3.0.15.RELEASE-rhlw-00003 with a backported security fix.\n\nCVE-2023-38286: Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier is enabled and there is write access to environment variables via the UI.\n\nThis patched artifact is a drop-in replacement for org.thymeleaf:thymeleaf 3.0.15.RELEASE from Maven Central.","status":"published","published":"2026-09-15T20:33:40Z","modified":"2026-10-27T04:00:11.935082557Z","updated_at":"2026-11-02T15:52:58.636919Z"}]}}