org.thymeleaf:thymeleaf-spring6 vulnerabilities (TuxCare)

1 vulnerability.

• org.thymeleaf:thymeleaf-spring6 TuxCare Thymeleaf: Improper recognition of unauthorized syntax patterns in sandboxed Thymeleaf expressions CVE-2026-41901 Known exploitedPublic exploitFix available 9.0 CriticalMay 4, 2026