High DSA-4908-1 1 CVE

libhibernate3-java - security update

Published Apr 29, 2021 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	libhibernate3-java	3.6.10.Final-9+deb10u1

Vulnerabilities 1

High 7.4

CVE-2020-25638

SQL injection in hibernate-core

A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an…

org.hibernate:hibernate-core libhibernate3-java libhibernate3-java Debian Ubuntu Maven

Dec 2, 2020