Browse CVEs

MEDIUM 6.5 CVE-2025-56769 An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary method invoca… Hutool 5.8.40+ Fix from $1,6002025-09-25 HIGH 7.5 CVE-2023-51075 hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerability allows attackers to cause… Hutool 5.8.24+ Fix from $1,9502023-12-27 HIGH 7.5 CVE-2023-51080 The NumberUtil.toBigDecimal method in hutool-core v5.8.23 was discovered to contain a stack overflow. Hutool 5.8.25+ Fix from $1,9502023-12-27 HIGH 7.5 CVE-2023-42278 hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse(). Hutool No fix yet Fix from $1,9502023-09-08 CRITICAL 9.8 CVE-2023-42276 hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray. Hutool 5.8.22+ Fix from $2,3002023-09-08 CRITICAL 9.8 CVE-2023-42277 hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath. Hutool No fix yet Fix from $2,3002023-09-08 HIGH 7.1 CVE-2023-33695 Hutool v5.8.17 and below was discovered to contain an information disclosure vulnerability via the File.createTempFile() function at /core/io/FileUti… Hutool after 5.8.17 Fix from $1,9502023-06-13 CRITICAL 9.8 CVE-2023-24162 Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter. Hutool No fix yet Fix from $2,3002023-01-31 CRITICAL 9.8 CVE-2023-24163 SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine. Hutool 5.8.21+ Fix from $2,3002023-01-31 HIGH 7.5 CVE-2022-4565 A vulnerability classified as problematic was found in Dromara HuTool up to 5.8.10. This vulnerability affects unknown code of the file cn.hutool.cor… Hutool after 5.8.10 Fix from $1,9502022-12-16 HIGH 7.5 CVE-2022-45688 A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML… Hutool 20230227+ Fix from $1,9502022-12-13 HIGH 7.5 CVE-2022-45689 hutool-json v5.8.10 was discovered to contain an out of memory error. Hutool No fix yet Fix from $1,9502022-12-13 CRITICAL 9.8 CVE-2022-22885 Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation. Hutool No fix yet Fix from $2,3002022-02-16 HIGH 7.5 CVE-2018-17297 The unzip function in ZipUtil.java in Hutool before 4.1.12 allows remote attackers to overwrite arbitrary files via directory traversal sequences in … Hutool 4.1.12+ Fix from $1,9502018-09-21