https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T20:09:12.087486+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-1932 CVE-2023-1932 — Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss 2026-10-05T20:09:12.104034+00:00

Affected: Red Hat A-MQ Clients 2, Red Hat Cryostat 2, Red Hat AMQ Broker 7, Red Hat A-MQ Online, Red Hat BPM Suite 6, Red Hat CodeReady Studio 12, Red Hat Data Grid 8, Red Hat Decision Manager 7, Red Hat Fuse 7, Red Hat JBoss BRMS 5 and 17 more

A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in a less-than character. Browsers may render an invalid html, allowing HTML injection or Cross-Site-Scripting (XSS) attacks.