Hibernate vulnerabilities

3 published CVEs name Hibernate among the affected products.

Critical 0High 0Medium 3Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2025-35036
hibernate-validator insecure default Expression Language interpolation
Hibernate · Hibernate Validator
Medium6.9
CVE-2020-10693
A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if…
Hibernate · hibernate-validator
Medium5.3
CVE-2019-10219
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious…
Hibernate · hibernate-validator
Medium6.5