362 matches found
hibernate__hibernate-validator_CVE-2019-10219_6_0_18_Final_fixed
Hibernate Validator Version: 6.0.18.Final - 25-10-2019 What is it? This is the reference implementation of JSR-380 - Bean Validation 2.0. Bean Validation defines a metadata model and API for JavaBean as well as method validation. The default metadata source are annotations, with the ability to...
hibernate__hibernate-validator_CVE-2019-10219_6-0-17-Final
Hibernate Validator Version: 6.0.17.Final - 13-06-2019 What is it? This is the reference implementation of JSR-380 - Bean Validation 2.0. Bean Validation defines a metadata model and API for JavaBean as well as method validation. The default metadata source are annotations, with the ability to...
Security Bulletin: Hibernate Validator is affected by an expression language injection vulnerability (CVE-2026-93879)
Summary Hibernate Validator is affected by an expression language injection vulnerability. Vulnerability Details CVEID:CVE-2026-93879 DESCRIPTION: Hibernate Validator could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption resulting from improper escapi...
Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities
Summary IBM Enterprise Build of Quarkus is affected by the Hibernate Validator vulnerability Vulnerability Details CVEID:CVE-2026-93879 DESCRIPTION: Hibernate Validator could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption resulting from improper...
Important: Red Hat Security Advisory: Red Hat build of Quarkus 3.33.4 release and security update
An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more informatio...
Important: Red Hat Security Advisory: Red Hat build of Quarkus 3.27.6 release and security update
An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more informatio...
CVE-2026-93879
A flaw was found in Hibernate Validator starting with version 5.4.1. This vulnerability allows an unauthenticated remote attacker to cause a Denial of Service DoS by submitting specially crafted input containing unescaped message parameters. Improper escaping allows user-supplied data to be...
ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.dstack:server-base-local (>=0.0.12, <=0.1.15) +17721 more potentially affected by CVE-2026-93879 via org.hibernate.validator:hibernate-validator (>=6.0.0.alpha1, <=6.2.5.final)
org.hibernate.validator:hibernate-validator MAVEN version =6.0.0.alpha1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =j8.2.2.0, =finchley.sr2.sr1, =finchley.sr4, =2.1.0 and more Source cves: CVE-2026-93879 Source advisory:...
ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1, <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-metrics (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +4206 more potentially affected by CVE-2026-93879 via org.hibernate.validator:hibernate-validator (>=9.1.0.alpha1, <=9.1.4.final)
org.hibernate.validator:hibernate-validator MAVEN version =9.1.0.alpha1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.2.0, =0.2.0, =1.0.0-beta.1, =1.8.0, =1.8.0, =1.8.1 and more Source cves:...
ai.acolite:openai-agent-sdk (>=0.1.0, <=0.4.0), ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0) +11025 more potentially affected by CVE-2026-93879 via org.hibernate.validator:hibernate-validator (>=8.0.0.alpha1, <=8.0.5.final)
org.hibernate.validator:hibernate-validator MAVEN version =8.0.0.alpha1, =0.1.0, =0.2.0, =0.7.9, =0.6.0, =0.5.0, =0.7.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.29 and more Source cves: CVE-2026-93879 Source advisory: SNYK:JAVA-ORGHIBERNATEVALIDATOR-20877468...
be.tomcools:dropwizard-websocket-jsr356-bundle (>=4.0.0-beta.1, <=4.0.0), ca.bc.gov.tno:dal-db (>=0.0.11-alpha, <=0.0.17-alpha) +1033 more potentially affected by CVE-2026-93879 via org.hibernate.validator:hibernate-validator (>=7.0.0.alpha1, <=7.0.5.final)
org.hibernate.validator:hibernate-validator MAVEN version =7.0.0.alpha1, =4.0.0-beta.1, =0.0.11-alpha, =0.6.2, =21.1.0, =22.3.0, =1.0.6, =1.0.6, =4.0.0-draft.1, =4.0.0-draft.3 and more Source cves: CVE-2026-93879 Source advisory: SNYK:JAVA-ORGHIBERNATEVALIDATOR-20877468...
ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0, <=0.3.0) +3321 more potentially affected by CVE-2026-93879 via org.hibernate.validator:hibernate-validator (>=9.0.0.beta2, <=9.0.1.final)
org.hibernate.validator:hibernate-validator MAVEN version =9.0.0.beta2, =0.1.0, =0.1.0, =0.0.2, =0.1.1, =0.2.0, =0.2.0, =0.2.0, =0.2.10 - ai.pipestream:mapping-service 0.1.1 and more Source cves: CVE-2026-93879 Source advisory: SNYK:JAVA-ORGHIBERNATEVALIDATOR-20877468...
Expression Language Injection
Overview org.hibernate.validator:hibernate-validator is a Hibernate Validator Engine Relocation Artifact. Affected versions of this package are vulnerable to Expression Language Injection in the ParameterTermResolver class, whose resolveExpression method converts a message parameter value to a...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hibernate-validator (UTSA-2026-093179)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093179 advisory. A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hibernate-validator (UTSA-2026-093593)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093593 advisory. In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to access th...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hibernate-validator (UTSA-2026-093189)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093189 advisory. A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in...
io.micronaut.configuration:micronaut-cassandra (1.1.0.m1), io.micronaut.configuration:micronaut-hibernate-validator (1.1.0.m1) +34 more potentially affected by CVE-2026-44242 via io.micronaut:micronaut-inject (1.1.0.m1)
io.micronaut:micronaut-inject MAVEN version 1.1.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-inject and may be impacted: - io.micronaut.configuration:micronaut-cassandra 1.1.0.m1 -...
EUVD-2020-0525
Malware in sbrugna...