br.com.ingenieux.cloudy:cloudy-data (0.0.4), org.hibernate:hibernate-validator-annotation-processor (4.3.0.alpha1) potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (4.3.0.alpha1)

org.hibernate:hibernate-validator MAVEN version 4.3.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - br.com.ingenieux.cloudy:cloudy-data 0.0.4 -...

Hibernate Validator may interpolate user-supplied input in a constraint violation message with Expression Language

Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitrary Java code. Hibernate Validator as ...

org.hibernate:hibernate-validator-annotation-processor (4.1.0.cr1) potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (4.1.0.cr1)

org.hibernate:hibernate-validator MAVEN version 4.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.hibernate:hibernate-validator-annotation-processor 4.1.0.cr1 Source cves:...

org.hibernate:hibernate-validator-annotation-processor (4.1.0.beta2) potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (4.1.0.beta2)

org.hibernate:hibernate-validator MAVEN version 4.1.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.hibernate:hibernate-validator-annotation-processor 4.1.0.beta2 Source cves:...

com.github.bingoohuang:quartz-glass (>=0.0.1, <=0.0.9), org.hibernate:hibernate-validator-annotation-processor (4.1.0.beta1) potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (4.1.0.beta1)

org.hibernate:hibernate-validator MAVEN version 4.1.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.github.bingoohuang:quartz-glass =0.0.1, =0.0.9 -...

br.com.caelum.stella:caelum-stella-hibernate-user-types (2.0-beta1), br.com.caelum.stella:hibernate-persistence-example (>=2.0-beta1, <=2.2.2) +75 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (4.0.2.ga)

org.hibernate:hibernate-validator MAVEN version 4.0.2.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - br.com.caelum.stella:caelum-stella-hibernate-user-types 2.0-beta1 -...

org.jasig.cas:cas-server-webapp (3.4-rc1), org.jasig.openregistry:openregistry-repository-jpa-impl (>=0.1-m3.1, <=0.1-m4) +3 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (4.0.1.ga)

org.hibernate:hibernate-validator MAVEN version 4.0.1.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.jasig.cas:cas-server-webapp 3.4-rc1 -...

org.apache.myfaces.extensions.scripting:myfaces20-example (>=1.0, <=1.0.6), org.apache.myfaces.trinidad:trinidad-demo (>=2.0.0-beta-1, <=2.1.2) +2 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (4.0.0.ga)

org.hibernate:hibernate-validator MAVEN version 4.0.0.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.apache.myfaces.extensions.scripting:myfaces20-example =1.0, =2.0.0-beta-1, =5.3.0,...

com.github.jinahya:jsonrpc-bind-tests (0.7.1), org.amebastack.container:ameba-container-grizzly (>=0.1.6c, <=0.1.6e) +185 more potentially affected by CVE-2025-35036 via org.hibernate.validator:hibernate-validator (>=7.0.0.alpha1, <=7.0.0.alpha6)

org.hibernate.validator:hibernate-validator MAVEN version =7.0.0.alpha1, =0.1.6c, =0.1.2, =0.1.2, =0.1.2, =0.1.6c, =3.0.0-m2, =3.0.0-m2, =3.0.0-m2, =3.0.0-m2, =3.0.0 and more Source cves: CVE-2025-35036 Source advisory: OSV:GHSA-7V6M-28JR-RG84...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.dstack:server-base-local (>=0.0.12, <=0.1.15) +12212 more potentially affected by CVE-2025-35036 via org.hibernate.validator:hibernate-validator (>=6.0.0.alpha1, <=6.1.7.final)

org.hibernate.validator:hibernate-validator MAVEN version =6.0.0.alpha1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =j8.2.2.0, =finchley.sr2.sr1, =finchley.sr4, =2.1.0 and more Source cves: CVE-2025-35036 Source advisory:...

GHSA-7V6M-28JR-RG84 Hibernate Validator may interpolate user-supplied input in a constraint violation message with Expression Language

Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitrary Java code. Hibernate Validator as ...

com.github.hermod:hermod-generator-maven-plugin (>=0.0.1, <=0.0.4), com.jcabi:jcabi-aspects (>=0.7.15, <=0.7.16) +9 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (5.0.0.cr3)

org.hibernate:hibernate-validator MAVEN version 5.0.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.github.hermod:hermod-generator-maven-plugin =0.0.1, =0.7.15, =0.7.15, =0.7.16 -...

org.hibernate:hibernate-validator-annotation-processor (4.2.0.cr1) potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (4.2.0.cr1)

org.hibernate:hibernate-validator MAVEN version 4.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.hibernate:hibernate-validator-annotation-processor 4.2.0.cr1 Source cves:...

org.hibernate:hibernate-validator-annotation-processor (4.2.0.beta1) potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (4.2.0.beta1)

org.hibernate:hibernate-validator MAVEN version 4.2.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.hibernate:hibernate-validator-annotation-processor 4.2.0.beta1 Source cves:...

com.jcabi:jcabi-aspects (>=0.7.9, <=0.7.13), com.jcabi:jcabi-heroku-maven-plugin (>=0.7.9, <=0.7.13) +5 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (5.0.0.cr1)

org.hibernate:hibernate-validator MAVEN version 5.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.jcabi:jcabi-aspects =0.7.9, =0.7.9, =2.0-m13-1, =2.0-m13-1, =2.0-m13-1, =2.0-m13-2...

com.jcabi:jcabi-aspects (0.7.8), com.jcabi:jcabi-heroku-maven-plugin (0.7.8) +4 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (5.0.0.beta1)

org.hibernate:hibernate-validator MAVEN version 5.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.jcabi:jcabi-aspects 0.7.8 - com.jcabi:jcabi-heroku-maven-plugin 0.7.8 -...

com.jcabi:jcabi-aspects (>=0.7.4, <=0.7.7), com.jcabi:jcabi-heroku-maven-plugin (>=0.7.4, <=0.7.7) +3 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (5.0.0.alpha2)

org.hibernate:hibernate-validator MAVEN version 5.0.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.jcabi:jcabi-aspects =0.7.4, =0.7.4, =0.4.5, =2.0-m11, =2.0-m12 Source cves:...

org.hibernate:hibernate-validator-annotation-processor (4.2.0.beta2) potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (4.2.0.beta2)

org.hibernate:hibernate-validator MAVEN version 4.2.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.hibernate:hibernate-validator-annotation-processor 4.2.0.beta2 Source cves:...

com.github.woki:payments-adyen-api (>=1.3.0, <=1.3.1), de.juplo:hibernate-maven-plugin (>=2.1.0, <=2.1.1) +41 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (5.3.1.final)

org.hibernate:hibernate-validator MAVEN version 5.3.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.github.woki:payments-adyen-api =1.3.0, =2.1.0, =2.3.9, =2.3.69, =2.3.69, =2.3.69,...

br.com.thiaguten:umbrella-configuration (>=0.1.0, <=1.0.0), br.com.thiaguten:umbrella-core (>=0.1.0, <=1.0.0) +1272 more potentially affected by CVE-2020-5245 +1 more via org.hibernate:hibernate-validator (>=6.0.0.beta2, <=6.1.7.final)

org.hibernate:hibernate-validator MAVEN version =6.0.0.beta2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.3.2-beta.6, =2.3.2-beta.5, =1.0.0, =1.1.16 - cn.openjava:openjava-spring-boot-starter 1.0.1 - cn.springcloud.gray:spring-cloud-gray-server d.0.1.0-beta-3 -...