Products: 1
    Vulnerabilities: 15
    Known Exploited: 0
    5
    Critical Level Threats
    8
    High Level Threats
    2
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2025-56769

    An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary method invocation and potentially remote code execution (RCE) via the QLExpressEngine class.

    Last Modified: Oct 03, 2025
    Published: Sep 25, 2025

    CVE-2023-51075

    hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerability allows attackers to cause a Denial of Service (DoS) via manipulation of the first two parameters.

    Last Modified: Sep 05, 2025
    Published: Dec 27, 2023

    CVE-2023-51080

    The NumberUtil.toBigDecimal method in hutool-core v5.8.23 was discovered to contain a stack overflow.

    Last Modified: Sep 12, 2025
    Published: Dec 27, 2023

    CVE-2023-42278

    hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse().

    Last Modified: Nov 21, 2024
    Published: Sep 08, 2023

    CVE-2023-42276

    hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray.

    Last Modified: Sep 12, 2025
    Published: Sep 08, 2023
    Items Per Page
    Hutool Vulnerabilities & Security CVEs | CVE-DB