{
  "@id": "urn:uuid:fdd98b2f-fabb-4497-96b3-130e974269eb",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 5,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-30T21:07:01.503995+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.hibernate.validator/hibernate-validator-cdi@6.2.5.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.hibernate.validator/hibernate-validator-cdi@6.2.5.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2019-10219 affects version 6.2.5.Final-tuxcare.1 of org.hibernate.validator:hibernate-validator-cdi.",
      "vulnerability": {
        "name": "CVE-2019-10219"
      },
      "action_statement": "Vulnerability CVE-2019-10219 affects version 6.2.5.Final-tuxcare.1 of org.hibernate.validator:hibernate-validator-cdi."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.hibernate.validator/hibernate-validator-cdi@6.2.5.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.hibernate.validator/hibernate-validator-cdi@6.2.5.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T22:44:11.275398+00:00",
      "status_notes": "Vulnerability CVE-2020-10693 affects version 6.2.5.Final-tuxcare.1 of org.hibernate.validator:hibernate-validator-cdi.",
      "vulnerability": {
        "name": "CVE-2020-10693"
      },
      "action_statement": "Vulnerability CVE-2020-10693 affects version 6.2.5.Final-tuxcare.1 of org.hibernate.validator:hibernate-validator-cdi."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.hibernate.validator/hibernate-validator-cdi@6.2.5.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.hibernate.validator/hibernate-validator-cdi@6.2.5.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T21:07:01.503995+00:00",
      "status_notes": "Vulnerability CVE-2023-1932 does not affect version 6.2.5.Final-tuxcare.1 of org.hibernate.validator:hibernate-validator-cdi. not_affected \u2014 hibernate-validator 6.2.5.Final is not affected by CVE-2023-1932. The vulnerable SafeHtml constraint and SafeHtmlValidator were completely removed by the upstream project in version 6.2.0 (commit 55a24f3368, July 2020), well before version 6.2.5.Final was released (September 2022). The entire @SafeHtml validation feature, including the vulnerable isValid() method, no longer exists in the target...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2023-1932"
      },
      "impact_statement": "not_affected \u2014 hibernate-validator 6.2.5.Final is not affected by CVE-2023-1932. The vulnerable SafeHtml constraint and SafeHtmlValidator were completely removed by the upstream project in version 6.2.0 (commit 55a24f3368, July 2020), well before version 6.2.5.Final was released (September 2022). The entire @SafeHtml validation feature, including the vulnerable isValid() method, no longer exists in the target..."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.hibernate.validator/hibernate-validator-cdi@6.2.5.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.hibernate.validator/hibernate-validator-cdi@6.2.5.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-20T10:05:00.136501+00:00",
      "status_notes": "Vulnerability CVE-2025-15104 is a false positive for org.hibernate.validator:hibernate-validator-cdi 6.2.5.Final-tuxcare.1. direct vulnerability is in Nu Html Checker (validator.nu) project",
      "vulnerability": {
        "name": "CVE-2025-15104"
      },
      "impact_statement": "direct vulnerability is in Nu Html Checker (validator.nu) project"
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.hibernate.validator/hibernate-validator-cdi@6.2.5.Final-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.hibernate.validator/hibernate-validator-cdi@6.2.5.Final-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T20:03:57.829841+00:00",
      "status_notes": "Vulnerability CVE-2025-35036 does not affect version 6.2.5.Final-tuxcare.1 of org.hibernate.validator:hibernate-validator-cdi. not_affected \u2014 CVE-2025-35036 describes an Expression Language (EL) injection vulnerability in Hibernate Validator before 6.2.0 and 7.0.0, where user-supplied input in custom constraint violation messages could be interpolated with EL, enabling arbitrary code execution or information disclosure. The target version 6.2.5.Final already contains the upstream fix introduced in version 6.2.0 (commits e076293b0 and...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2025-35036"
      },
      "impact_statement": "not_affected \u2014 CVE-2025-35036 describes an Expression Language (EL) injection vulnerability in Hibernate Validator before 6.2.0 and 7.0.0, where user-supplied input in custom constraint violation messages could be interpolated with EL, enabling arbitrary code execution or information disclosure. The target version 6.2.5.Final already contains the upstream fix introduced in version 6.2.0 (commits e076293b0 and..."
    }
  ]
}