org.springframework:spring-hibernate (1.2.2), org.springframework:spring-orm (1.2.2) +1 more potentially affected by CVE-2014-0054 via org.springframework:spring-webmvc (1.2.2)

org.springframework:spring-webmvc MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework:spring-hibernate 1.2.2 - org.springframework:spring-orm 1.2.2 -...

org.springframework:spring-hibernate (1.2.2), org.springframework:spring-mock (1.2.2) +3 more potentially affected by CVE-2013-6430 via org.springframework:spring-web (1.2.2)

org.springframework:spring-web MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-hibernate 1.2.2 - org.springframework:spring-mock 1.2.2 -...

org.springframework:spring-hibernate (1.2.3), org.springframework:spring-mock (1.2.3) +3 more potentially affected by CVE-2013-6430 via org.springframework:spring-web (1.2.3)

org.springframework:spring-web MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-hibernate 1.2.3 - org.springframework:spring-mock 1.2.3 -...

org.springframework:spring-hibernate (1.2.1), org.springframework:spring-mock (1.2.1) +3 more potentially affected by CVE-2013-6430 via org.springframework:spring-web (1.2.1)

org.springframework:spring-web MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-hibernate 1.2.1 - org.springframework:spring-mock 1.2.1 -...

org.springframework:spring-hibernate (1.2.4), org.springframework:spring-mock (1.2.4) +3 more potentially affected by CVE-2013-6430 via org.springframework:spring-web (1.2.4)

org.springframework:spring-web MAVEN version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.springframework:spring-hibernate 1.2.4 - org.springframework:spring-mock 1.2.4 -...

@bildvitta/vuex-offline (>=3.0.0-beta.0, <=3.0.0-beta.3), @indexeddb-orm/idb-orm (>=0.0.1, <=0.0.4) +4 more potentially affected by CVE-2022-21189 via dexie (>=4.0.0-alpha.1, <=4.0.0-alpha.2)

dexie NPM version =4.0.0-alpha.1, =3.0.0-beta.0, =0.0.1, =1.0.0, =1.0.0, =11.5.0, =12.4.1 Source cves: CVE-2022-21189 Source advisory: GHSA-3XGX-R9J4-QW9W...

org.springframework:spring-dao (1.2.3), org.springframework:spring-hibernate (1.2.3) +7 more potentially affected by CVE-2022-22968 via org.springframework:spring-context (1.2.3)

org.springframework:spring-context MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - org.springframework:spring-dao 1.2.3 - org.springframework:spring-hibernate 1.2.3 -...

org.springframework:spring-dao (1.2.2), org.springframework:spring-hibernate (1.2.2) +7 more potentially affected by CVE-2022-22968 via org.springframework:spring-context (1.2.2)

org.springframework:spring-context MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - org.springframework:spring-dao 1.2.2 - org.springframework:spring-hibernate 1.2.2 -...

org.springframework:spring-hibernate (1.2.4), org.springframework:spring-orm (1.2.4) +1 more potentially affected by CVE-2022-22965 via org.springframework:spring-webmvc (1.2.4)

org.springframework:spring-webmvc MAVEN version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework:spring-hibernate 1.2.4 - org.springframework:spring-orm 1.2.4 -...

org.springframework:spring-hibernate (1.2.1), org.springframework:spring-orm (1.2.1) +1 more potentially affected by CVE-2022-22965 via org.springframework:spring-webmvc (1.2.1)

org.springframework:spring-webmvc MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework:spring-hibernate 1.2.1 - org.springframework:spring-orm 1.2.1 -...

org.springframework:spring-hibernate (1.2.2), org.springframework:spring-orm (1.2.2) +1 more potentially affected by CVE-2022-22965 via org.springframework:spring-webmvc (1.2.2)

org.springframework:spring-webmvc MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.springframework:spring-hibernate 1.2.2 - org.springframework:spring-orm 1.2.2 -...

GHSA-8GRG-Q944-CCH5 SQL Injection in Hibernate ORM

A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access...

ai.hyacinth.framework:core-service-jpa-support (>=0.5.0, <=0.5.21), ai.hyacinth.framework:core-service-trigger-server (>=0.5.0, <=0.5.21) +3957 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (>=5.0.0.beta1, <=5.3.19.final)

org.hibernate:hibernate-core MAVEN version =5.0.0.beta1, =0.5.0, =0.5.0, =1.0.0, =1.0.0, =0.2, =0.3, =0.2, =0.2, =0.3, =0.3, =0.3, =0.3, =0.3, =0.2, =0.6 and more Source cves: CVE-2020-25638 Source advisory: OSV:GHSA-J8JW-G6FQ-MP7H...

objection.js security vulnerability

objection.js is a SQL-friendly ORM for Node.js. A security vulnerability exists in objection.js that stems from the vulnerability of objection.js to "prototype contamination" due to improper control of object prototype properties...

io.github.ryan-za:async-elastic-orm (0.2.2) potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (1.0.0.beta2)

org.elasticsearch:elasticsearch MAVEN version 1.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - io.github.ryan-za:async-elastic-orm 0.2.2 Source cves: CVE-2021-22144 Source advisory:...

io.github.ryan-za:async-elastic-orm (0.2.2) potentially affected by CVE-2021-22135 via org.elasticsearch:elasticsearch (1.0.0.beta2)

org.elasticsearch:elasticsearch MAVEN version 1.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - io.github.ryan-za:async-elastic-orm 0.2.2 Source cves: CVE-2021-22135 Source advisory:...

Security Bulletin: Hibernate ORM Vulnerabilities Affect IBM Control Center (CVE-2019-14900, CVE-2020-25638)

Summary Hibernate ORM is vulnerable to SQL injection. Vulnerability Details CVEID: CVE-2019-14900 DESCRIPTION: Hibernate ORM is vulnerable to SQL injection. The implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the...

CVE-2021-21414

Prisma is an open source ORM for Node.js & TypeScript. As of today, we are not aware of any Prisma users or external consumers of the @prisma/sdk package who are affected by this security vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable...

CVE-2021-21414

Prisma is an open source ORM for Node.js & TypeScript. As of today, we are not aware of any Prisma users or external consumers of the @prisma/sdk package who are affected by this security vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable...

Remote code execution

Prisma is an open source ORM for Node.js & TypeScript. As of today, we are not aware of any Prisma users or external consumers of the @prisma/sdk package who are affected by this security vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable...