Vulnerability index

Browse CVEs

14 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Hutool MEDIUM 6.5
CVE-2025-56769

An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary method invoca…

Fix: 5.8.40+
Fix from $1,600 2025-09-25
Hutool HIGH 7.5
CVE-2023-51075

hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerability allows attackers to cause…

Fix: 5.8.24+
Fix from $1,950 2023-12-27
Hutool HIGH 7.5
CVE-2023-51080

The NumberUtil.toBigDecimal method in hutool-core v5.8.23 was discovered to contain a stack overflow.

Fix: 5.8.25+
Fix from $1,950 2023-12-27
Hutool HIGH 7.5
CVE-2023-42278

hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse().

No fix yet
Fix from $1,950 2023-09-08
Hutool CRITICAL 9.8
CVE-2023-42276

hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray.

Fix: 5.8.22+
Fix from $2,300 2023-09-08
Hutool CRITICAL 9.8
CVE-2023-42277

hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath.

No fix yet
Fix from $2,300 2023-09-08
Hutool HIGH 7.1
CVE-2023-33695

Hutool v5.8.17 and below was discovered to contain an information disclosure vulnerability via the File.createTempFile() function at /core/io/FileUti…

Fix: after 5.8.17
Fix from $1,950 2023-06-13
Hutool CRITICAL 9.8
CVE-2023-24162

Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter.

No fix yet
Fix from $2,300 2023-01-31
Hutool CRITICAL 9.8
CVE-2023-24163

SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine.

Fix: 5.8.21+
Fix from $2,300 2023-01-31
Hutool HIGH 7.5
CVE-2022-4565

A vulnerability classified as problematic was found in Dromara HuTool up to 5.8.10. This vulnerability affects unknown code of the file cn.hutool.cor…

Fix: after 5.8.10
Fix from $1,950 2022-12-16
Hutool HIGH 7.5
CVE-2022-45688

A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML…

Fix: 20230227+
Fix from $1,950 2022-12-13
Hutool HIGH 7.5
CVE-2022-45689

hutool-json v5.8.10 was discovered to contain an out of memory error.

No fix yet
Fix from $1,950 2022-12-13
Hutool CRITICAL 9.8
CVE-2022-22885

Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation.

No fix yet
Fix from $2,300 2022-02-16
Hutool HIGH 7.5
CVE-2018-17297

The unzip function in ZipUtil.java in Hutool before 4.1.12 allows remote attackers to overwrite arbitrary files via directory traversal sequences in …

Fix: 4.1.12+
Fix from $1,950 2018-09-21