Hibernate Validator (Redhat) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 122 known versions, newest CVE from 2025-06-03. Vendor: Redhat.

CVEs of Hibernate Validator

• CVE-2025-35036 - CVSS 7.3 (high), 2025-06-03: Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message…
• CVE-2020-10693 - CVSS 5.3 (medium), 2020-05-06: A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if…
• CVE-2019-10219 - CVSS 6.5 (medium), 2019-11-08: A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious…
• CVE-2017-7536 - CVSS 7 (high), 2018-01-10: In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to…
• CVE-2014-3558 - CVSS 5 (medium), 2014-09-30: ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows…