Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/cn.hutool/hutool-all@4.5.14
purl pkg:maven/cn.hutool/hutool-all@4.5.14
Next non-vulnerable version 5.8.12
Latest non-vulnerable version 5.8.21
Risk 4.5
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-kws5-vmk8-nkgh
Aliases:
CVE-2023-24163
GHSA-6c25-cxcc-pmc4
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') SQL Inection vulnerability in Dromara hutool v5.8.11 allows attacker to execute arbitrary code via the aviator template engine.
5.8.12
Affected by 0 other vulnerabilities.
5.8.21
Affected by 0 other vulnerabilities.
VCID-r6jz-gmx9-m3g4
Aliases:
CVE-2023-24162
GHSA-77h8-5j3h-jcjf
Deserialization of Untrusted Data Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter.
5.8.12
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T22:20:50.287129+00:00 GitLab Importer Affected by VCID-r6jz-gmx9-m3g4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/cn.hutool/hutool-all/CVE-2023-24162.yml 38.4.0
2026-04-16T22:20:46.718659+00:00 GitLab Importer Affected by VCID-kws5-vmk8-nkgh https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/cn.hutool/hutool-all/CVE-2023-24163.yml 38.4.0
2026-04-11T23:38:48.089323+00:00 GitLab Importer Affected by VCID-r6jz-gmx9-m3g4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/cn.hutool/hutool-all/CVE-2023-24162.yml 38.3.0
2026-04-11T23:38:44.219576+00:00 GitLab Importer Affected by VCID-kws5-vmk8-nkgh https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/cn.hutool/hutool-all/CVE-2023-24163.yml 38.3.0
2026-04-02T23:43:02.613774+00:00 GitLab Importer Affected by VCID-r6jz-gmx9-m3g4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/cn.hutool/hutool-all/CVE-2023-24162.yml 38.1.0
2026-04-02T23:42:58.575457+00:00 GitLab Importer Affected by VCID-kws5-vmk8-nkgh https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/cn.hutool/hutool-all/CVE-2023-24163.yml 38.1.0
2026-04-01T18:05:51.929554+00:00 GitLab Importer Affected by VCID-r6jz-gmx9-m3g4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/cn.hutool/hutool-all/CVE-2023-24162.yml 38.0.0
2026-04-01T18:05:47.360218+00:00 GitLab Importer Affected by VCID-kws5-vmk8-nkgh https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/cn.hutool/hutool-all/CVE-2023-24163.yml 38.0.0