ch.dvbern.oss.cdipersistence:cdi-persistence-test (=2.0.7), club.javafamily:notification-manager-all (>=2.3.2-beta.6 <=2.3.2-beta.14) +668 more potentially affected by CVE-2019-10219 via org.hibernate:hibernate-validator (>=6.0.0.Beta2 <=6.0.17.Final)

org.hibernate:hibernate-validator MAVEN version =6.0.0.Beta2, =2.3.2-beta.6, =2.3.2-beta.5, =0.8.2-release, =0.6-release, =0.8.2-release, =0.8.0-release, =0.8.2.9-release, =0.8.4.0-release, =0.8.0-release, =0.6-release, =0.8.0-release, =0.6-release, =0.6-release, =0.8.4.4-release and more Source...

com.sbuslab:model (>=1.0.12 <=1.0.14) potentially affected by CVE-2019-10219 via org.hibernate:hibernate-validator (=6.1.0.Alpha3)

org.hibernate:hibernate-validator MAVEN version =6.1.0.Alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.sbuslab:model =1.0.12, =1.0.14 Source cves: CVE-2019-10219 Source advisory:...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0 <=4.4.0.1), ai.hyacinth.framework:core-service-admin-server (>=0.5.0 <=0.5.21) +5096 more potentially affected by CVE-2019-10219 via org.hibernate.validator:hibernate-validator (>=6.0.0.Alpha1 <=6.0.17.Final)

org.hibernate.validator:hibernate-validator MAVEN version =6.0.0.Alpha1, =4.4.0.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =Finchley.SR2.SR1, =Finchley.SR4, =Finchley.SR2.SR1, =Finchley.SR2.SR1, =Finchley.SR4, =Greenwich.SR2.1 and more Source cves: CVE-2019-10219...

com.hack23.cia:service.api (>=2018.12.15 <=2019.6.23), com.hack23.cia:service.data.impl (>=2018.12.15 <=2019.6.23) +5 more potentially affected by CVE-2019-10219 via org.hibernate.validator:hibernate-validator (>=6.1.0.Alpha1 <=6.1.0.Alpha5)

org.hibernate.validator:hibernate-validator MAVEN version =6.1.0.Alpha1, =2018.12.15, =2018.12.15, =2018.12.15, =0.11.0, =0.13.0, =0.11.0, =6.1.0.Alpha1, =6.1.0.Alpha5 Source cves: CVE-2019-10219 Source advisory: OSV:GHSA-M8P2-495H-CCMH...

GHSA-M8P2-495H-CCMH The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

How to Fine-Tune Static Code Analysis - Part 2

RIPS performs language-specific code analysis. Each of our unique analysis engines is dedicated to a different programming language. You can get the maximum out of static analysis if you further fine-tune our language-specific engines to your specific code features. In the following, we guide you...

Unspecified Vulnerability in Json Pattern Validator

Json Pattern Validator JPV is a JSON pattern validator . A security vulnerability exists in JPV versions prior to 2.1.1. Attackers can use the vulnerability to manipulate the results of type detection with the help of a specially crafted payload...

Validation bypass is possible in Json Pattern Validator

In jpv aka Json Pattern Validator before 2.1.1, compareCommon can be bypassed because certain internal attributes can be overwritten via a conflicting name, as demonstrated by 'constructor': 'name':'Array'. This affects validate. Hence, a crafted payload can overwrite this builtin attribute to...

GHSA-RH46-3FGC-MVRF Validation bypass is possible in Json Pattern Validator

In jpv aka Json Pattern Validator before 2.1.1, compareCommon can be bypassed because certain internal attributes can be overwritten via a conflicting name, as demonstrated by 'constructor': 'name':'Array'. This affects validate. Hence, a crafted payload can overwrite this builtin attribute to...

CVE-2019-19507

In jpv aka Json Pattern Validator before 2.1.1, compareCommon can be bypassed because certain internal attributes can be overwritten via a conflicting name, as demonstrated by 'constructor': 'name':'Array'. This affects validate. Hence, a crafted payload can overwrite this builtin attribute to...

CVE-2019-19507

In jpv aka Json Pattern Validator before 2.1.1, compareCommon can be bypassed because certain internal attributes can be overwritten via a conflicting name, as demonstrated by 'constructor': 'name':'Array'. This affects validate. Hence, a crafted payload can overwrite this builtin attribute to...

CVE-2019-19507

CVE-2019-19507 affects jpv (Json Pattern Validator) prior to version 2.1.1. The vulnerability arises in compareCommon(), where internal attributes can be overwritten via a conflicting property name (e.g., constructor: { name: 'Array' }), allowing an attacker to bypass validation logic and manipul...

CVE-2019-19507

In jpv aka Json Pattern Validator before 2.1.1, compareCommon can be bypassed because certain internal attributes can be overwritten via a conflicting name, as demonstrated by 'constructor': 'name':'Array'. This affects validate. Hence, a crafted payload can overwrite this builtin attribute to...

slp-validate input validation error vulnerability

slp-validate is a lightweight SLP Simple Ledger Protocol validator with features such as pre-broadcast validation and burn protection. An input validation error vulnerability exists in slp-validate. No detailed vulnerability details are provided at this time...

CVE-2019-16762 Validator parsing discrepancy due to string encoding in NPM slpjs

A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the slpjs npm package. An attacker could create a specially crafted Bitcoin script in order to cause a hard-fork from the SLP consensus. Affected users can upgrade to...

CVE-2019-16761 Validator parsing discrepancy due to string encoding in NPM slp-validate 1.0.0

A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the [email protected] npm package. An attacker could create a specially crafted Bitcoin script in order to cause a hard-fork from the SLP consensus. All versions 1.0....

CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

DEBIAN-CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...

CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack...