Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Thymeleaf

2 known vulnerabilities

2
CRITICAL

Top Products

thymeleaf 2
2 CVEs
9.0
CVE-2026-40478

Thymeleaf is a server-side Java template engine for web and standalone environments. Versions 3.1.3.RELEASE and prior co

 9.0
CVE-2026-40477

Thymeleaf is a server-side Java template engine for web and standalone environments. Versions 3.1.3.RELEASE and prior co

Frequently Asked Questions

How many CVEs affect Thymeleaf?

Thymeleaf has 2 CVE records in our database, including 2 critical and 0 high severity vulnerabilities.

What are the most severe Thymeleaf vulnerabilities?

Thymeleaf has 2 critical severity (CVSS 9.0+) and 0 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.

How can I scan for Thymeleaf vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Thymeleaf products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Thymeleaf Vulnerabilities

CyberStrike scans your infrastructure for Thymeleaf vulnerabilities and provides real-time remediation guidance.

Get Started