Approved changes feed: RSS · Atom
cpe:2.3:a:hutool:hutool:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Hutool (b6511075-62d6-5ca4-bfca-b299c226d261) |
|---|---|
| Product | Hutool (1e39a136-5d31-536b-8e4b-4fc84e4c37b6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:gitee/dromara/hutool |
purl2cpe | 2026-06-01 10:12:32.607346 |
pkg:github/dromara/hutool |
purl2cpe | 2026-06-01 10:12:32.607348 |
pkg:maven/cn.hutool/hutool-all |
purl2cpe | 2026-06-01 10:12:32.607350 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-56769 |
vulnerable | 2026-06-08 07:33:15.752973 |
Details available
An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary method invocation and potentially remote code execution (RCE) via the QLExpressEngine class.
Published: 2025-09-25T00:00:00.000Z
Updated: 2025-09-26T20:29:53.732Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51080 |
vulnerable | 2026-06-08 06:16:17.238199 |
Details available
The NumberUtil.toBigDecimal method in hutool-core v5.8.23 was discovered to contain a stack overflow.
Published: 2023-12-27T00:00:00.000Z
Updated: 2024-08-02T22:32:09.176Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51075 |
vulnerable | 2026-06-08 06:16:17.236403 |
Details available
hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerability allows attackers to cause a Denial of Service (DoS) via manipulation of the first two parameters.
Published: 2023-12-27T00:00:00.000Z
Updated: 2025-04-17T20:34:41.780Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42276 |
vulnerable | 2026-06-08 06:11:07.964569 |
Details available
hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray.
Published: 2023-09-08T00:00:00.000Z
Updated: 2024-09-26T17:44:29.696Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33695 |
vulnerable | 2026-06-08 06:06:23.372122 |
Details available
Hutool v5.8.17 and below was discovered to contain an information disclosure vulnerability via the File.createTempFile() function at /core/io/FileUtil.java.
Published: 2023-06-13T00:00:00.000Z
Updated: 2025-01-03T02:22:07.275Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24163 |
vulnerable | 2026-06-08 05:56:05.203700 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4565 |
vulnerable | 2026-06-08 05:51:59.767521 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45690 |
vulnerable | 2026-06-08 05:50:36.606450 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-17297 |
vulnerable | 2026-06-08 05:11:06.236410 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.