hibernate__hibernate-validator_CVE-2019-10219_6-0-17-Final

Hibernate Validator Version: 6.0.17.Final - 13-06-2019 What is it? This is the reference implementation of JSR-380 - Bean Validation 2.0. Bean Validation defines a metadata model and API for JavaBean as well as method validation. The default metadata source are annotations, with the ability to...

hibernate__hibernate-validator_CVE-2019-10219_6_0_18_Final_fixed

Hibernate Validator Version: 6.0.18.Final - 25-10-2019 What is it? This is the reference implementation of JSR-380 - Bean Validation 2.0. Bean Validation defines a metadata model and API for JavaBean as well as method validation. The default metadata source are annotations, with the ability to...

com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (6.0.0), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (6.0.0) +53 more potentially affected by CVE-2025-66675 via org.apache.struts:struts2-core (>=7.0.0, <=7.0.3)

org.apache.struts:struts2-core MAVEN version =7.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.3 and more Source cves: CVE-2025-66675 Source advisory: GHSA-RG58-XHH7-MQJW...

EUVD-2020-30122

Malware in sbrugna...

EUVD-2021-8627

Malicious code in bioql PyPI...

EUVD-2022-1227

Malicious code in bioql PyPI...

com.github.mygreen:super-csv-annotation (>=2.0, <=2.0.3), com.kumuluz.ee:kumuluzee-bean-validation-hibernate-validator (>=2.1.0-beta.2, <=2.3.0-beta.1) +53 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (5.3.3.final)

org.hibernate:hibernate-validator MAVEN version 5.3.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.github.mygreen:super-csv-annotation =2.0, =2.1.0-beta.2, =0.22.0, =2.3.13, =2.3.78,...

org.glassfish.jersey.bundles.glassfish.v4_0:jersey-gfv4_0-core (2.0-rc1), org.glassfish.jersey.examples:bean-validation-webapp (2.0-rc1) +1 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (5.0.0.cr4)

org.hibernate:hibernate-validator MAVEN version 5.0.0.cr4 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.glassfish.jersey.bundles.glassfish.v40:jersey-gfv40-core 2.0-rc1 -...

com.jcabi:jcabi-aspects (>=0.7.4, <=0.7.7), com.jcabi:jcabi-heroku-maven-plugin (>=0.7.4, <=0.7.7) +3 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (5.0.0.alpha2)

org.hibernate:hibernate-validator MAVEN version 5.0.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.jcabi:jcabi-aspects =0.7.4, =0.7.4, =0.4.5, =2.0-m11, =2.0-m12 Source cves:...

CVE-2020-9296

Netflix Titus uses Java Bean Validation JSR 380 custom constraint validators. When building custom constraint violation error messages, different types of interpolation are supported, including Java EL expressions. If an attacker can inject arbitrary data in the error message template being passe...

CVE-2020-9297

Netflix Titus, all versions prior to version v0.1.1-rc.274, uses Java Bean Validation JSR 380 custom constraint validators. When building custom constraint violation error messages, different types of interpolation are supported, including Java EL expressions. If an attacker can inject arbitrary...

com.amazonaws.serverless:aws-serverless-java-container-struts2 (>=1.3.1, <=1.5.1), com.jgeppert.struts2:struts2-aws-lambda-support-plugin (1.2.0) +41 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.5.20)

org.apache.struts:struts2-core MAVEN version 2.5.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.amazonaws.serverless:aws-serverless-java-container-struts2 =1.3.1, =3.0-alpha-48, =3.0-alpha-4...

com.moomanow.web.struts:struts-moo-authentication-tag (>=0.0.9, <=0.0.12), com.moomanow.web.struts:struts-moo-select-tag (>=0.0.11, <=0.0.12) +39 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.5.2)

org.apache.struts:struts2-core MAVEN version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.moomanow.web.struts:struts-moo-authentication-tag =0.0.9, =0.0.11, =0.0.9, =0.0.1, =0.0.4,...

com.github.a-pz:struts2-thymeleaf3-plugin (>=1.0.0-release, <=1.0.1-release), com.jgeppert.struts2.jquery:struts2-jquery-chart-plugin (4.0.1) +44 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.5.5)

org.apache.struts:struts2-core MAVEN version 2.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.github.a-pz:struts2-thymeleaf3-plugin =1.0.0-release, =1.0.1-release -...

com.amashchenko.struts2.pdfstream:struts2-pdfstream-plugin (2.0.0), com.amashchenko.struts2.pdfstream:struts2-pdfstream-showcase (2.0.0) +37 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.5)

org.apache.struts:struts2-core MAVEN version 2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.amashchenko.struts2.pdfstream:struts2-pdfstream-plugin 2.0.0 -...

com.jgeppert.struts2.jquery:struts2-jquery-chart-plugin (4.0.3), com.jgeppert.struts2.jquery:struts2-jquery-datatables-plugin (4.0.3) +45 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.5.14.1)

org.apache.struts:struts2-core MAVEN version 2.5.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.jgeppert.struts2.jquery:struts2-jquery-chart-plugin 4.0.3 -...

com.jcabi:jcabi-aspects (0.7.8), com.jcabi:jcabi-heroku-maven-plugin (0.7.8) +4 more potentially affected by CVE-2023-1932 via org.hibernate:hibernate-validator (5.0.0.beta1)

org.hibernate:hibernate-validator MAVEN version 5.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.jcabi:jcabi-aspects 0.7.8 - com.jcabi:jcabi-heroku-maven-plugin 0.7.8 -...

SRC-2022-0023 : VMWare Workspace ONE Access ClaimTransformationHelper validateClaimRuleCondition Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to disclose sensitive information on affected installations of VMWare Workspace ONE Access. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

io.undertow:undertow-http2-test-suite (1.3.0.beta3), io.undertow:undertow-servlet (1.3.0.beta3) +32 more potentially affected by CVE-2022-2053 via io.undertow:undertow-core (1.3.0.beta3)

io.undertow:undertow-core MAVEN version 1.3.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta3 - io.undertow:undertow-servlet 1.3.0.beta3 -...

This Week in Spring - May 24th, 2022

Hi, Spring fans! Im in Spain for business and not just a little pleasure. Yesterday, my partner, her mother, and I went to Formentera, Spain, a little island off of Ibiza, Spain. It was amazing. Were now in Ibiza, Spain, which is a little island not far from Barcelona, Spain, on the mainland of...