Tag

jpa

Safeguard articles tagged "jpa" — guides, analysis, and best practices for software supply chain and application security.

1 article

Security

CVE-2020-25638: SQL Injection in Hibernate ORM Explained

CVE-2020-25638 is a SQL injection flaw in hibernate-core that surfaces when SQL comments are enabled and literals are used in JPA Criteria queries. Here is who is affected and how to remediate it.

Mar 5, 20255 min read