Patchwire CVEs, their patch status, and feeds to follow them

org.thymeleaf:thymeleaf-spring6

Feeds

All events: Atom · JSON
Important (CVSS 7 or more, exploited, or EPSS 10% or more): Atom · JSON

CVEs

2 CVEs.

Published	CVE	Status
2026-04-17	CVE-2026-40478 EPSS 1%CVSS 9.1	Fixed upstream
2026-04-17	CVE-2026-40477 EPSS <1%CVSS 9.1	Fixed upstream