Approved changes feed: RSS · Atom

cpe:2.3:a:thymeleaf:thymeleaf:3.0.12:*:*:*:*:*:*:*

part: a version: 3.0.12 update: *

VendorThymeleaf (45db8000-aa45-52cb-b982-f1f0ed82d7d1)
ProductThymeleaf (250dedfb-339d-5f39-bff7-eb42d3b63503)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/thymeleaf/thymeleaf purl2cpe 2026-06-01 10:12:34.133492
pkg:maven/org.thymeleaf/thymeleaf purl2cpe 2026-06-01 10:12:34.133493
pkg:sourceforge/thymeleaf purl2cpe 2026-06-01 10:12:34.133495

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-43466 vulnerable 2026-06-08 05:36:43.427938 Details available
In the thymeleaf-spring5:3.0.12 component, thymeleaf combined with specific scenarios in template injection may lead to remote code execution.
Published: 2021-11-09T00:00:00.000Z
Updated: 2024-08-04T03:55:29.288Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.