{"action":"Upgrade org.hibernate.validator:hibernate-validator to 6.2.0.CR1 (6.x) or 7.0.0.CR1 (7.x) or later.","affected":[{"fixed":"6.2.0.CR1","introduced":"0"},{"fixed":"7.0.0.CR1","introduced":"7.0.0.Alpha1"}],"component":"org.hibernate.validator:hibernate-validator","cve_ids":["CVE-2025-35036"],"ecosystem":"Maven","epss":0.00749,"exploited":false,"fixed_versions":["6.2.0.CR1","7.0.0.CR1"],"ghsa_id":"GHSA-7v6m-28jr-rg84","id":"tcs_01M5N8K6NX1VESKPVP9WCSSYVN","modified_at":"2025-09-12T20:54:10.938701Z","published_at":"2025-06-03T21:30:39Z","references":["https://osv.dev/vulnerability/GHSA-7v6m-28jr-rg84","https://nvd.nist.gov/vuln/detail/CVE-2025-35036","https://github.com/hibernate/hibernate-validator/pull/1138","https://github.com/hibernate/hibernate-validator/commit/05f795bb7cf18856004f40e5042709e550ed0d6e","https://github.com/hibernate/hibernate-validator/commit/254858d9dcc4e7cd775d1b0f47f482218077c5e1","https://github.com/hibernate/hibernate-validator/commit/d2db40b9e7d22c7a0b44d7665242dfc7b4d14d78","https://github.com/hibernate/hibernate-validator/commit/e076293b0ee1bfa97b6e67d05ad9eee1ad77e893","https://docs.jboss.org/hibernate/stable/validator/reference/en-US/html_single/#section-hibernateconstraintvalidatorcontext","https://github.com/hibernate/hibernate-validator","https://github.com/hibernate/hibernate-validator/compare/6.1.7.Final...6.2.0.Final","https://hibernate.atlassian.net/browse/HV-1816","https://hibernate.org/validator/documentation/migration-guide/#6-2-0-cr1","https://in.relation.to/2021/01/06/hibernate-validator-700-62-final-released/#expression-language","https://labs.watchtowr.com/expression-payloads-meet-mayhem-cve-2025-4427-and-cve-2025-4428","https://www.cve.org/CVERecord?id=CVE-2020-5245","https://www.cve.org/CVERecord?id=CVE-2025-4428"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-7v6m-28jr-rg84","url":"https://osv.dev/vulnerability/GHSA-7v6m-28jr-rg84"}],"summary":"Hibernate Validator may interpolate user-supplied input in a constraint violation message with Expression Language"}