Hibernate

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 5
    Known Exploited: 0
    0
    Critical Level Threats
    3
    High Level Threats
    2
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-93879

    org.hibernate.validator:hibernate-validator: Hibernate Validator - unescaped {duplicates} message parameter is re-evaluated as Expression Language (unauthenticated DoS)

    Last Modified: Oct 21, 2026
    Published: Oct 12, 2026

    CVE-2025-35036

    hibernate-validator insecure default Expression Language interpolation

    Last Modified: Sep 18, 2025
    Published: Jun 03, 2025

    CVE-2023-1932

    Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss

    Last Modified: Jun 24, 2025
    Published: Feb 07, 2024

    CVE-2020-25638

    hibernate-core: SQL injection vulnerability when both hibernate.use_sql_comments and JPQL String literals are used

    Last Modified: Apr 23, 2025
    Published: Oct 01, 2020

    CVE-2019-14900

    hibernate: SQL injection issue in Hibernate ORM

    Last Modified: Nov 21, 2024
    Published: May 12, 2020
    Items Per Page
    Hibernate Vulnerabilities & Security CVEs | CVE-DB