Approved changes feed: RSS · Atom

cpe:2.3:a:hutool:hutool:5.8.23:*:*:*:*:*:*:*

part: a version: 5.8.23 update: *

VendorHutool (b6511075-62d6-5ca4-bfca-b299c226d261)
ProductHutool (1e39a136-5d31-536b-8e4b-4fc84e4c37b6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:gitee/dromara/hutool purl2cpe 2026-06-01 10:12:32.608054
pkg:github/dromara/hutool purl2cpe 2026-06-01 10:12:32.608055
pkg:maven/cn.hutool/hutool-all purl2cpe 2026-06-01 10:12:32.608057

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-51080 vulnerable 2026-06-08 06:16:17.238172 Details available
The NumberUtil.toBigDecimal method in hutool-core v5.8.23 was discovered to contain a stack overflow.
Published: 2023-12-27T00:00:00.000Z
Updated: 2024-08-02T22:32:09.176Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51075 vulnerable 2026-06-08 06:16:17.235806 Details available
hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerability allows attackers to cause a Denial of Service (DoS) via manipulation of the first two parameters.
Published: 2023-12-27T00:00:00.000Z
Updated: 2025-04-17T20:34:41.780Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.