Vulnerability Database · Debian · libhibernate-validator-java · Version
libhibernate-validator-java 5.3.6-2
5.3.6-2 is affected by 8 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 0 High 0 Medium 2 Low 0 Unrated 6
-
Database updated 22/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
libhibernate-validator-java 5.3.6-2 vulnerabilities
8 vulnerabilities cover libhibernate-validator-java 5.3.6-2. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| XSS Vulnerability in Hibernate Validator: Unsafe HTML Comment Handling | 6.1 medium | No fix published | 08 Nov 2019 |
| Invalid EL Expression Evaluation in Hibernate Validator - CVE-2020-10693 | 5.3 medium | No fix published | 06 May 2020 |
| Critical Vulnerability in Hibernate Validator: User Input Interpolation Risk | N/A unrated | No fix published | 03 Jun 2025 |
| Critical Vulnerability in Hibernate Validator: Potential Code Execution Risk | N/A unrated | No fix published | 03 Jun 2025 |
| HTML Injection and XSS Vulnerability in Hibernate Validator - CVE-2023-1932 | N/A unrated | No fix published | 07 Nov 2024 |
| HTML Injection Vulnerability in libhibernate-validator-java: CVE-2023-1932 | N/A unrated | No fix published | 07 Nov 2024 |
| Critical Vulnerability in libhibernate-validator-java: Bypass of Input Sanitation Controls | N/A unrated | No fix published | 06 May 2020 |
| XSS Vulnerability in Hibernate Validator - libhibernate-validator-java Package | N/A unrated | No fix published | 08 Nov 2019 |
Looking for another version, or everything Vulert holds for libhibernate-validator-java?
Questions
About libhibernate-validator-java 5.3.6-2
Is libhibernate-validator-java 5.3.6-2 vulnerable?
Yes. 8 vulnerabilities in the Vulert database cover libhibernate-validator-java 5.3.6-2: 0 critical, 0 high, 2 medium and 0 low, plus 6 not yet rated. Each entry above names the fixed version to move to.
How do I monitor libhibernate-validator-java for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the libhibernate-validator-java version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.