org.hibernate:hibernate-validator@5.1.2.Final vulnerabilities
latest version
8.0.2.Final
latest non vulnerable version
first published
17 years ago
latest version published
12 days ago
licenses detected
- [4.0.0.Alpha1,)
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.hibernate:hibernate-validator package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
org.hibernate:hibernate-validator is a Hibernate Validator Engine Relocation Artifact. Affected versions of this package are vulnerable to Improper Input Validation. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation (escaping, stripping) controls that developers may have put in place when handling user-controlled data in error messages. How to fix Improper Input Validation? Upgrade | [,6.0.19.Final)[6.1.0,6.1.3.Final) |
org.hibernate:hibernate-validator is a Hibernate Validator Engine Relocation Artifact. Affected versions of this package are vulnerable to Cross-site Scripting (XSS). The How to fix Cross-site Scripting (XSS)? Upgrade | [,6.0.18.Final)[6.1.0.Alpha1,6.1.0.Final) |