Hibernate vulnerabilities
We track 1 vulnerability in Hibernate products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 3, 2025.
1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score
Latest Hibernate vulnerabilities
- 7.3 High severity
Hibernate Validator: Improper Control of Generation of Code
Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitra