Description
In the thymeleaf-spring5:3.0.12 component, thymeleaf combined with specific scenarios in template injection may lead to remote code execution.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.thymeleaf:thymeleaf-spring5 | < 3.0.13.RELEASE | 3.0.13.RELEASE | GHSA-qcj6-jqrg-4wp2 |