Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-43466
9.8
CRITICALCVSS v3
Published
November 9, 2021
CVSS v2
6.8 MEDIUM
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
In the thymeleaf-spring5:3.0.12 component, thymeleaf combined with specific scenarios in template injection may lead to remote code execution.
thymeleaf/thymeleaf
GitHubThymeleaf is a modern server-side Java template engine for both web and standalone environments.
GitHubThymeleaf is a modern server-side Java template engine for both web and standalone environments.= 3.0.12NVD
NPM