https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:14:32 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-199845 EUVD-2026-199845 https://cve.radiocsirt.org/vuln/euvd-2026-199845 https://cve.radiocsirt.org/vuln/fkie_cve-2023-1932 <p>A flaw was found in hibernate-validator&#39;s &#39;isValid&#39; method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in a less-than character. Browsers may render an invalid html, allowing HTML injection or Cross-Site-Scripting (XSS) attacks.</p> <p>A flaw was found in hibernate-validator&#39;s &#39;isValid&#39; method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in a less-than character. Browsers may render an invalid html, allowing HTML injection or Cross-Site-Scripting (XSS) attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-1932 https://cve.radiocsirt.org/vuln/ghsa-x83m-pf6f-pf9g <p><strong>Affected:</strong> Maven: org.hibernate.validator:hibernate-validator, Maven: org.hibernate:hibernate-validator</p> <p>A flaw was found in hibernate-validator&#39;s &#39;isValid&#39; method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in a less-than character. Browsers may render an invalid html, allowing HTML injection or Cross-Site-Scripting (XSS) attacks.</p> <p><strong>Affected:</strong> Maven: org.hibernate.validator:hibernate-validator, Maven: org.hibernate:hibernate-validator</p> <p>A flaw was found in hibernate-validator&#39;s &#39;isValid&#39; method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in a less-than character. Browsers may render an invalid html, allowing HTML injection or Cross-Site-Scripting (XSS) attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-x83m-pf6f-pf9g https://cve.radiocsirt.org/vuln/gsd-2023-1932 gsd-2023-1932 https://cve.radiocsirt.org/vuln/gsd-2023-1932 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-1932 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libhibernate-validator-java, Ubuntu:18.04:LTS: libhibernate-validator-java, Ubuntu:20.04:LTS: libhibernate-validator-java, Ubuntu:22.04:LTS: libhibernate-validator-java, Ubuntu:24.04:LTS: libhibernate-validator-java, Ubuntu:25.10: libhibernate-validator-java, Ubuntu:26.04:LTS: libhibernate-validator-java</p> <p>A flaw was found in hibernate-validator&#39;s &#39;isValid&#39; method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in a less-than character. Browsers may render an invalid html, allowing HTML injection or Cross-Site-Scripting (XSS) attacks.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libhibernate-validator-java, Ubuntu:18.04:LTS: libhibernate-validator-java, Ubuntu:20.04:LTS: libhibernate-validator-java, Ubuntu:22.04:LTS: libhibernate-validator-java, Ubuntu:24.04:LTS: libhibernate-validator-java, Ubuntu:25.10: libhibernate-validator-java, Ubuntu:26.04:LTS: libhibernate-validator-java</p> <p>A flaw was found in hibernate-validator&#39;s &#39;isValid&#39; method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in a less-than character. Browsers may render an invalid html, allowing HTML injection or Cross-Site-Scripting (XSS) attacks.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-1932