← All advisoriesImportant severity7.1NVD Advisory· Published Sep 17, 2026org.hibernate/hibernate-core: Hibernate ORM: SQL Injection via unescaped JSON path segment allows data exfiltration and authorization bypassCVE-2026-77874Descriptionorg.hibernate/hibernate-core: Hibernate ORM: SQL Injection via unescaped JSON path segment allows data exfiltration and authorization bypassAffected products1Hibernate/Hibernatellm-fuzzyPatchesVulnerability mechanicsNews mentions0No linked articles in our index yet.
