{"action":"Upgrade libhibernate-validator-java to 4.3.3-4 or later.","affected":[{"fixed":"4.3.3-4","introduced":"0"}],"component":"libhibernate-validator-java","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["4.3.3-4"],"id":"tcs_01M5NCM1FVK8ZGAFDC1KMC9BBC","modified_at":"2026-09-01T20:03:50.134289932Z","published_at":"2018-01-10T15:29:00.283Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2017-7536","https://security-tracker.debian.org/tracker/CVE-2017-7536"],"severity":{"label":"high","score":7},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2017-7536","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2017-7536"}],"summary":"In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are"}