Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.hibernate.validator/hibernate-validator@6.2.0.Final
purl pkg:maven/org.hibernate.validator/hibernate-validator@6.2.0.Final
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-gghq-w7r9-57hs hibernate-validator Cross-site Scripting vulnerability A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in a less-than character. Browsers may render an invalid html, allowing HTML injection or Cross-Site-Scripting (XSS) attacks. CVE-2023-1932
GHSA-x83m-pf6f-pf9g