thymeleaf Vulnerabilities

thymeleaf has 5 published CVE records since 2021, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 8.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting thymeleaf, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.