https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:23:52.421579+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-35380 cnvd-2020-35380 2026-10-03T01:23:52.869531+00:00 cnvd-2020-35380 https://cve.radiocsirt.org/vuln/euvd-2026-40007 EUVD-2026-40007 2026-10-03T01:23:52.869596+00:00 EUVD-2026-40007 https://cve.radiocsirt.org/vuln/fkie_cve-2020-10693 fkie_cve-2020-10693 2026-10-03T01:23:52.869612+00:00

A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation (escaping, stripping) controls that developers may have put in place when handling user-controlled data in error messages.

 https://cve.radiocsirt.org/vuln/ghsa-rmrm-75hp-phr2 GHSA-rmrm-75hp-phr2 — Improper Input Validation in Hibernate Validator 2026-10-03T01:23:52.869645+00:00

Affected: Maven: org.hibernate.validator:hibernate-validator, Maven: org.hibernate:hibernate-validator

A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation (escaping, stripping) controls that developers may have put in place when handling user-controlled data in error messages.

 https://cve.radiocsirt.org/vuln/gsd-2020-10693 gsd-2020-10693 2026-10-03T01:23:52.869675+00:00 gsd-2020-10693 https://cve.radiocsirt.org/vuln/oesa-2021-1138 OESA-2021-1138 — hibernate-validator security update 2026-10-03T01:23:52.869689+00:00

Affected: openEuler:20.03-LTS-SP1: hibernate-validator

This is the reference implementation of JSR-349 - Bean Validation 1.1. Bean Validation defines a meta-data model and API for JavaBean as well as method validation. The default meta-data source are annotations, with the ability to override and extend the meta-data through the use of XML validation descriptors. Security Fix(es): A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation (escaping, stripping) controls that developers may have put in place when handling user-controlled data in error messages.(CVE-2020-10693)

 https://cve.radiocsirt.org/vuln/rhsa-2020:3461 RHSA-2020:3461 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.2 security update 2026-10-03T01:23:52.869713+00:00

hibernate: SQL injection issue in Hibernate ORM EAP: field-name is not parsed in accordance to RFC7230 Wildfly: Improper authorization issue in WildFlySecurityManager when using alternative protection domain jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution dom4j: XML External Entity vulnerability in default SAX parser Undertow: Incomplete fix for CVE-2017-2666 due to permitting invalid characters in HTTP requests hibernate-validator: Improper input validation in the interpolation of constraint error messages wildfly-elytron: session fixation when using FORM authentication wildfly: exposed setting of TCCL via the EmbeddedManagedProcess API wildfly: unsafe deserialization in Wildfly Enterprise Java Beans netty: compression/decompression codecs don't enforce limits on buffer allocation sizes wildfly: Some EJB transaction objects may get accumulated causing Denial of Service wildfly: EJB SessionOpenInvocations may not be removed properly after a response is received causing Denial of Service

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-10693 UBUNTU-CVE-2020-10693 2026-10-03T01:23:52.869757+00:00

Affected: Ubuntu:16.04:LTS: libhibernate-validator-java, Ubuntu:18.04:LTS: libhibernate-validator-java, Ubuntu:20.04:LTS: libhibernate-validator-java, Ubuntu:22.04:LTS: libhibernate-validator-java, Ubuntu:24.04:LTS: libhibernate-validator-java, Ubuntu:25.10: libhibernate-validator-java, Ubuntu:26.04:LTS: libhibernate-validator-java

A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation (escaping, stripping) controls that developers may have put in place when handling user-controlled data in error messages.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1912 WID-SEC-W-2022-1912 — Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen 2026-10-03T01:23:52.869786+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um Code zur Ausführung zu bringen, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service zu verursachen.