Package · Debian

libhibernate-validator4-java

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.3

CVE-2025-35036

hibernate-validator insecure default Expression Language interpolation

Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitr…

Hibernate hibernate-validator org.hibernate:hibernate-validator libhibernate-validator-java Debian Ubuntu Maven

Jun 3, 2025