Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
thymeleaf/thymeleaf-spring
3.1-master @ f078508
4
Fixes
0
CVEs
CRITICAL
Peak severity
Highlights
Cross-Site Scripting (XSS): 2 prior fixes. Scrutinize any change in this area.
Spring: most-fixed (2 issues). Treat as high-risk during review.
4 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Expression Language Injection: Allowing request parameters like 'param.*' to influence preprocessing expressions in SpEL can lead to arbitrary remote code execution. Attackers exploit this by injecting malicious expressions that are evaluated on the server side via SpEL expression parsing.
Cross-Site Scripting (XSS): Evaluating user-controlled SpEL expressions in unescaped contexts such as 'th:utext' creates direct vectors for Cross-Site Scripting. Restricting request parameter interpolation within these unescaped components is necessary to prevent malicious payload execution in client browsers.
Cross-Site Scripting (XSS): Improperly escaped values rendered via specific form-binding attributes (such as 'th:field') allow malicious values submitted in forms to execute arbitrary scripts in the user's browser context. Ensure robust contextual output encoding for all rendered field attributes.