[org.thymeleaf:thymeleaf-spring5] Template injection in thymeleaf-spring5

In the thymeleaf-spring5:3.0.12 component, thymeleaf combined with specific scenarios in template injection may lead to remote code execution.

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-43466
• https://vuldb.com/?id.186365
• https://github.com/thymeleaf/thymeleaf-spring/issues/263#issuecomment-977199524
• https://github.com/advisories/GHSA-qcj6-jqrg-4wp2