Hibernate Validator
Approved changes feed: RSS · Atom
cpe:2.3:a:hibernate:hibernate-validator:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hibernate (3af18e0a-a716-51a5-8186-7813ecb01770) |
|---|---|
| Product | Hibernate Validator (7989a3e4-3ff3-54c1-a4f7-7d21a320d8e7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libhibernate-validator-java |
purl2cpe | 2026-06-01 10:13:03.893853 |
pkg:deb/ubuntu/libhibernate-validator-java |
purl2cpe | 2026-06-01 10:13:03.893855 |
pkg:github/hibernate/hibernate-validator |
purl2cpe | 2026-06-01 10:13:03.893856 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-1932 |
vulnerable | 2026-06-08 05:52:37.237650 |
Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss
MEDIUM (6.1)
A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in a less-than character. Browsers may render an invalid html, allowing HTML injection or Cross-Site-Scripting (XSS) attacks.
Published: 2024-11-07T10:00:51.745Z
Updated: 2024-11-07T14:09:26.936Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10693 |
vulnerable | 2026-06-08 05:16:35.665770 |
Details available
MEDIUM (5.3)
A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation (escaping, stripping) controls that developers may have put in place when handling user-controlled data in error messages.
Published: 2020-05-06T13:03:33.000Z
Updated: 2024-08-04T11:06:11.169Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10219 |
vulnerable | 2026-06-08 05:12:22.552827 |
Details available
MEDIUM (6.5)
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
Published: 2019-11-08T14:46:03.000Z
Updated: 2025-07-07T13:55:51.360Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.