Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.hibernate:hibernate-core

3 known vulnerabilities (2 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 2 high
Dependents
14
Registry
Maven Central

Advisories 3

  • Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection

    Affected: from 5.2.8, fixed in 5.3.38.

  • A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final.

    Affected: from 5.4.0.Final, fixed in 5.4.24.Final; fixed in 5.3.20.Final.

  • A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1.

    Affected: fixed in 5.3.18; from 5.4.0, fixed in 5.4.18; from 5.5.0.Alpha1, fixed in 5.5.0.Beta1.