Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    Related vulnerabilities

    RHSA-2026:83082

    Vulnerability from csaf_redhat - Published: 2026-10-15 18:16 - Updated: 2026-10-19 11:59
    Summary
    Red Hat Security Advisory: Red Hat build of Quarkus 3.27.6 release and security update
    Severity
    Important
    Scope
    24 vulnerabilities in this advisory, including CVE-2026-93879.
    CVE-2026-93879

    A flaw was found in Hibernate Validator starting with version 5.4.1. This vulnerability allows an unauthenticated remote attacker to cause a Denial of Service (DoS) by submitting specially crafted input containing unescaped message parameters. Improper escaping allows user-supplied data to be re-evaluated during Expression Language (EL) processing, leading to excessive resource consumption and application unresponsiveness.

    Fixed: 1 product Known not affected: 1032 products
    https://access.redhat.com/errata/RHSA-2026:83082
    Open the full advisory

    RHSA-2026:83520

    Vulnerability from csaf_redhat - Published: 2026-10-15 19:06 - Updated: 2026-10-19 11:59
    Summary
    Red Hat Security Advisory: Red Hat build of Quarkus 3.33.4 release and security update
    Severity
    Important
    Scope
    21 vulnerabilities in this advisory, including CVE-2026-93879.
    CVE-2026-93879

    A flaw was found in Hibernate Validator starting with version 5.4.1. This vulnerability allows an unauthenticated remote attacker to cause a Denial of Service (DoS) by submitting specially crafted input containing unescaped message parameters. Improper escaping allows user-supplied data to be re-evaluated during Expression Language (EL) processing, leading to excessive resource consumption and application unresponsiveness.

    Fixed: 1 product Known not affected: 1039 products
    https://access.redhat.com/errata/RHSA-2026:83520
    Open the full advisory

    UBUNTU-CVE-2026-93879 (CVE-2026-93879)

    Vulnerability from osv_ubuntu – Published: 2026-10-15 00:00 – Updated: 2026-10-15 00:00 – Source website
    VLAI

    {
      "affected": [
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libhibernate-validator-java",
                "binary_version": "4.2.1-2"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:16.04:LTS",
            "name": "libhibernate-validator-java",
            "purl": "pkg:deb/ubuntu/libhibernate-validator-java@4.2.1-2?arch=source\u0026distro=xenial"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "4.2.1-2"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libhibernate-validator-java",
                "binary_version": "4.3.4-1~18.04.1"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:18.04:LTS",
            "name": "libhibernate-validator-java",
            "purl": "pkg:deb/ubuntu/libhibernate-validator-java@4.3.4-1~18.04.1?arch=source\u0026distro=bionic"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "4.3.3-2",
            "4.3.3-3",
            "4.3.3-4",
            "4.3.4-1~18.04.1"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libhibernate-validator-java",
                "binary_version": "5.3.6-1"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:20.04:LTS",
            "name": "libhibernate-validator-java",
            "purl": "pkg:deb/ubuntu/libhibernate-validator-java@5.3.6-1?arch=source\u0026distro=focal"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "4.3.4-1",
            "5.3.6-1"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libhibernate-validator4-java",
                "binary_version": "4.3.4-4~20.04.1"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:20.04:LTS",
            "name": "libhibernate-validator4-java",
            "purl": "pkg:deb/ubuntu/libhibernate-validator4-java@4.3.4-4~20.04.1?arch=source\u0026distro=focal"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "4.3.4-4~20.04.1"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libhibernate-validator-java",
                "binary_version": "5.3.6-1"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:22.04:LTS",
            "name": "libhibernate-validator-java",
            "purl": "pkg:deb/ubuntu/libhibernate-validator-java@5.3.6-1?arch=source\u0026distro=jammy"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "5.3.6-1"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libhibernate-validator4-java",
                "binary_version": "4.3.4-4"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:22.04:LTS",
            "name": "libhibernate-validator4-java",
            "purl": "pkg:deb/ubuntu/libhibernate-validator4-java@4.3.4-4?arch=source\u0026distro=jammy"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "4.3.4-4"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libhibernate-validator-java",
                "binary_version": "5.3.6-2"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:24.04:LTS",
            "name": "libhibernate-validator-java",
            "purl": "pkg:deb/ubuntu/libhibernate-validator-java@5.3.6-2?arch=source\u0026distro=noble"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "5.3.6-2"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libhibernate-validator4-java",
                "binary_version": "4.3.4-7"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:24.04:LTS",
            "name": "libhibernate-validator4-java",
            "purl": "pkg:deb/ubuntu/libhibernate-validator4-java@4.3.4-7?arch=source\u0026distro=noble"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "4.3.4-7"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libhibernate-validator-java",
                "binary_version": "5.3.6-3"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:26.10",
            "name": "libhibernate-validator-java",
            "purl": "pkg:deb/ubuntu/libhibernate-validator-java@5.3.6-3?arch=source\u0026distro=stonking"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "5.3.6-3"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libhibernate-validator4-java",
                "binary_version": "4.3.4-7"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:26.10",
            "name": "libhibernate-validator4-java",
            "purl": "pkg:deb/ubuntu/libhibernate-validator4-java@4.3.4-7?arch=source\u0026distro=stonking"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "4.3.4-7"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libhibernate-validator-java",
                "binary_version": "5.3.6-3"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:26.04:LTS",
            "name": "libhibernate-validator-java",
            "purl": "pkg:deb/ubuntu/libhibernate-validator-java@5.3.6-3?arch=source\u0026distro=resolute"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "5.3.6-3"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libhibernate-validator4-java",
                "binary_version": "4.3.4-7"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:26.04:LTS",
            "name": "libhibernate-validator4-java",
            "purl": "pkg:deb/ubuntu/libhibernate-validator4-java@4.3.4-7?arch=source\u0026distro=resolute"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "4.3.4-7"
          ]
        }
      ],
      "aliases": [],
      "details": "[Unknown description]",
      "id": "UBUNTU-CVE-2026-93879",
      "modified": "2026-10-15T00:00:00Z",
      "published": "2026-10-15T00:00:00Z",
      "references": [
        {
          "type": "REPORT",
          "url": "https://ubuntu.com/security/CVE-2026-93879"
        },
        {
          "type": "REPORT",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-93879"
        },
        {
          "type": "REPORT",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2540892"
        }
      ],
      "related": [],
      "schema_version": "1.7.0",
      "severity": [
        {
          "score": "medium",
          "type": "Ubuntu"
        }
      ],
      "upstream": [
        "CVE-2026-93879"
      ]
    }