Hibernate hibernate-validator
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-35036 | < 6.2.0 ; < 7.0.0 | hibernate-validator insecure default Expression Language interpolation | MEDIUM 6.9 | 0.7 % | ||
| CVE-2020-10693 | 6.1.2.Final | A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to | MEDIUM 5.3 | 2.4 % | ||
| CVE-2019-10219 | 6.0.0.Alpha1 – 6.0.17.Final ; 6.1.0.Alpha1 – 6.1.0.Alpha6 | A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potent | MEDIUM 6.5 | 2.2 % |