com.hack23.cia:service.data.impl (2017.1.21), com.hack23.cia:service.impl (2017.1.21) +1 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (5.4.0.cr1)

org.hibernate:hibernate-validator MAVEN version 5.4.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.hack23.cia:service.data.impl 2017.1.21 - com.hack23.cia:service.impl 2017.1.21 -...

br.com.thiaguten:umbrella-configuration (>=0.1.0, <=1.0.0), br.com.thiaguten:umbrella-core (>=0.1.0, <=1.0.0) +1272 more potentially affected by CVE-2020-5245 +1 more via org.hibernate:hibernate-validator (>=6.0.0.beta2, <=6.1.7.final)

org.hibernate:hibernate-validator MAVEN version =6.0.0.beta2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.3.2-beta.6, =2.3.2-beta.5, =1.0.0, =1.1.16 - cn.openjava:openjava-spring-boot-starter 1.0.1 - cn.springcloud.gray:spring-cloud-gray-server d.0.1.0-beta-3 -...

com.astamuse:asta4d-sample (>=1.0-b1, <=1.0-b2), com.astamuse:asta4d-spring (1.0-b1) +147 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (5.0.2.final)

org.hibernate:hibernate-validator MAVEN version 5.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.astamuse:asta4d-sample =1.0-b1, =1.0-b1, =0.2.0-rc1, =1.0.1006, =0.10.0, =0.8, =0.9...

com.cybermkd:icerest (>=1.0.1, <=1.0.1.3), com.cybermkd:mongodbplugin (>=1.0.5, <=1.0.8.2) +32 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (5.3.0.alpha1)

org.hibernate:hibernate-validator MAVEN version 5.3.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.cybermkd:icerest =1.0.1, =1.0.5, =1.20.0, =1.18.3, =2016.3.7, =2016.3.7, =2.2.113,...

com.github.tonybaines:gestalt (>=0.4.0, <=0.8.9), com.jcabi:jcabi-dynamodb-maven-plugin (0.6) +2 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (5.1.0.cr1)

org.hibernate:hibernate-validator MAVEN version 5.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.github.tonybaines:gestalt =0.4.0, =0.8.9 - com.jcabi:jcabi-dynamodb-maven-plugin 0.6 ...

at.researchstudio.sat:won-owner-webapp (0.3), at.yawk.dropwizard-nagios:dropwizard-nagios (1.0) +655 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (5.4.1.final)

org.hibernate:hibernate-validator MAVEN version 5.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - at.researchstudio.sat:won-owner-webapp 0.3 - at.yawk.dropwizard-nagios:dropwizard-nagio...

br.com.ingenieux.dropwizard:dropwizard-envvar (0.0.1), br.com.perolasoftware.framework:framework-business (0.0.4) +390 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (5.1.1.final)

org.hibernate:hibernate-validator MAVEN version 5.1.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - br.com.ingenieux.dropwizard:dropwizard-envvar 0.0.1 -...

org.hibernate:hibernate-validator-annotation-processor (4.2.0.cr1) potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (4.2.0.cr1)

org.hibernate:hibernate-validator MAVEN version 4.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.hibernate:hibernate-validator-annotation-processor 4.2.0.cr1 Source cves:...

br.com.ingenieux.cloudy:cloudy-data (0.0.4), org.hibernate:hibernate-validator-annotation-processor (4.3.0.alpha1) potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (4.3.0.alpha1)

org.hibernate:hibernate-validator MAVEN version 4.3.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - br.com.ingenieux.cloudy:cloudy-data 0.0.4 -...

am.ik.home:uaa-server (>=1.3.0, <=1.9.0), au.com.cybernostics:theme-tree (0.9.0) +756 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (5.3.4.final)

org.hibernate:hibernate-validator MAVEN version 5.3.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - am.ik.home:uaa-server =1.3.0, =0.2.0, =1.0.3, =1.0.6, =0.2.1, =6.2.0.5, =6.2.0.6,...

br.com.caelum.stella:caelum-stella-hibernate-user-types (2.0-beta1), br.com.caelum.stella:hibernate-persistence-example (>=2.0-beta1, <=2.2.2) +75 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (4.0.2.ga)

org.hibernate:hibernate-validator MAVEN version 4.0.2.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - br.com.caelum.stella:caelum-stella-hibernate-user-types 2.0-beta1 -...

Hibernate Validator may interpolate user-supplied input in a constraint violation message with Expression Language

Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitrary Java code. Hibernate Validator as ...

ai.minxiao:ds4s-cdl4j_2.11 (>=0.1.0, <=0.1.2), be.fluid-it.microservice.bundle:microservice-bundle-core (>=0.1-1, <=0.1-5) +1212 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (5.1.3.final)

org.hibernate:hibernate-validator MAVEN version 5.1.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - ai.minxiao:ds4s-cdl4j2.11 =0.1.0, =0.1-1, =0.1-1, =0.8-1-1, =0.0.105, =0.0.6, =0.0.5,...

GHSA-7V6M-28JR-RG84 Hibernate Validator may interpolate user-supplied input in a constraint violation message with Expression Language

Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitrary Java code. Hibernate Validator as ...

CVE-2025-35036

Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitrary Java code. Hibernate Validator as ...

DEBIAN-CVE-2025-35036

Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitrary Java code. Hibernate Validator as ...

UBUNTU-CVE-2025-35036

Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitrary Java code. Hibernate Validator as ...

com.github.jinahya:jsonrpc-bind-tests (0.7.1), org.amebastack.container:ameba-container-grizzly (>=0.1.6c, <=0.1.6e) +185 more potentially affected by CVE-2025-35036 via org.hibernate.validator:hibernate-validator (>=7.0.0.alpha1, <=7.0.0.alpha6)

org.hibernate.validator:hibernate-validator MAVEN version =7.0.0.alpha1, =0.1.6c, =0.1.2, =0.1.2, =0.1.2, =0.1.6c, =3.0.0-m2, =3.0.0-m2, =3.0.0-m2, =3.0.0-m2, =3.0.0 and more Source cves: CVE-2025-35036 Source advisory: SNYK:JAVA-ORGHIBERNATEVALIDATOR-10300773...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.dstack:server-base-local (>=0.0.12, <=0.1.15) +12207 more potentially affected by CVE-2025-35036 via org.hibernate.validator:hibernate-validator (>=6.0.0.alpha1, <=6.1.7.final)

org.hibernate.validator:hibernate-validator MAVEN version =6.0.0.alpha1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =j8.2.2.0, =finchley.sr2.sr1, =finchley.sr4, =2.1.0 and more Source cves: CVE-2025-35036 Source advisory:...

Arbitrary Code Injection

Overview org.hibernate.validator:hibernate-validator is a Hibernate Validator Engine Relocation Artifact. Affected versions of this package are vulnerable to Arbitrary Code Injection due to the interpolation of user-supplied input in constraint violation messages with Expression Language. An...