org.hibernate/hibernate-core vulnerabilities

CVEs whose affected-version data names the org.hibernate/hibernate-core package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-0603High· 8.3PoC

9mo ago

A flaw was found in Hibernate

A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrCl…

▾ MidnightRed Hat · org.hibernate/hibernate-coreEPSS 1.0%via NVD