Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

hibernate/hibernate-validator

              main @ d392083
            

Fixes

CVEs

CRITICAL

Peak severity

52.9%

Coverage

Highlights

Cross-Site Scripting (XSS): 4 prior fixes. Scrutinize any change in this area.

engine/src/main/java/org/hibernate/validator/internal/xml/XmlParserHelper.java: most-fixed (3 issues). Treat as high-risk during review.

8 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Remote Code Execution: Restrictions and configuration levels placed on Expression Language (EL) evaluation were not propagated down to iterable or map-keyed nodes during custom violation interpolation, permitting complete EL evaluation and arbitrary code execution in those sub-contexts.

Cross-Site Scripting (XSS): The SafeHtmlValidator suffered from multiple parser-differential vulnerabilities (such as ignoring non-Element nodes or dropping structurally misplaced elements during validation), allowing malicious scripts to bypass checks and execute in client browsers.

Expression Language Injection: Enabling Expression Language (EL) interpolation by default inside custom constraint violations exposes a highly dangerous vector for arbitrary code execution if untrusted user input is formatted into validation messages.