org.thymeleaf.extras:thymeleaf-extras-springsecurity5@3.0.4.RELEASE vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the org.thymeleaf.extras:thymeleaf-extras-springsecurity5 package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Cross-site Scripting (XSS)

org.thymeleaf.extras:thymeleaf-extras-springsecurity5 is a Modern server-side Java template engine for both web and standalone environments.

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) when creating a user with username <script type="text/javascript>alert("");</script> .

How to fix Cross-site Scripting (XSS)?

Upgrade org.thymeleaf.extras:thymeleaf-extras-springsecurity5 to version 3.1.0.M1 or higher.

[,3.1.0.M1)