org.thymeleaf:thymeleaf vulnerabilities (TuxCare)

2 vulnerabilities.

• org.thymeleaf:thymeleaf TuxCare Thymeleaf: Improper recognition of unauthorized syntax patterns in sandboxed Thymeleaf expressions CVE-2026-41901 Known exploitedPublic exploitFix available 9.0 CriticalMay 4, 2026
• org.thymeleaf:thymeleaf TuxCare Spring-boot-admin sandbox bypass via crafted HTML CVE-2023-38286 Fix available 7.5 HighJuly 14, 2023