org.hibernate:hibernate-core@5.3.7.Final vulnerabilities
latest version
7.1.4.Final
latest non vulnerable version
first published
17 years ago
latest version published
16 days ago
licenses detected
- [5.3.1.Final,7.0.0.Beta5)
package registry
Direct Vulnerabilities
Known vulnerabilities in the org.hibernate:hibernate-core package. This does not include vulnerabilities belonging to this package’s dependencies.
Fix vulnerabilities automatically
Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
org.hibernate:hibernate-core is a library providing Object/Relational Mapping (ORM) support to applications, libraries, and frameworks. Affected versions of this package are vulnerable to SQL Injection. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity. How to fix SQL Injection? Upgrade | [,5.4.24.Final) |
org.hibernate:hibernate-core is a library providing Object/Relational Mapping (ORM) support to applications, libraries, and frameworks. Affected versions of this package are vulnerable to SQL Injection. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. How to fix SQL Injection? Upgrade | [,5.3.18.Final)[5.4.0.Final,5.4.18.Final) |