https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:15:46.851518+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-199845 EUVD-2026-199845 2026-10-02T17:15:46.855176+00:00 EUVD-2026-199845 https://cve.radiocsirt.org/vuln/fkie_cve-2023-1932 fkie_cve-2023-1932 2026-10-02T17:15:46.855227+00:00

A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in a less-than character. Browsers may render an invalid html, allowing HTML injection or Cross-Site-Scripting (XSS) attacks.

 https://cve.radiocsirt.org/vuln/ghsa-x83m-pf6f-pf9g GHSA-x83m-pf6f-pf9g — hibernate-validator Cross-site Scripting vulnerability 2026-10-02T17:15:46.855270+00:00

Affected: Maven: org.hibernate.validator:hibernate-validator, Maven: org.hibernate:hibernate-validator

A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in a less-than character. Browsers may render an invalid html, allowing HTML injection or Cross-Site-Scripting (XSS) attacks.

 https://cve.radiocsirt.org/vuln/gsd-2023-1932 gsd-2023-1932 2026-10-02T17:15:46.855298+00:00 gsd-2023-1932 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-1932 UBUNTU-CVE-2023-1932 2026-10-02T17:15:46.855321+00:00

Affected: Ubuntu:16.04:LTS: libhibernate-validator-java, Ubuntu:18.04:LTS: libhibernate-validator-java, Ubuntu:20.04:LTS: libhibernate-validator-java, Ubuntu:22.04:LTS: libhibernate-validator-java, Ubuntu:24.04:LTS: libhibernate-validator-java, Ubuntu:25.10: libhibernate-validator-java, Ubuntu:26.04:LTS: libhibernate-validator-java

A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in a less-than character. Browsers may render an invalid html, allowing HTML injection or Cross-Site-Scripting (XSS) attacks.