We are using below jar in one of our product and Veracode Scan (a static security scan tool we use) has reported 3 flaws in the jar file.

hibernate-validator-3.1.0.GA.jar - 3 flaws, please find the document attached with the complete details about the flaws.

We wanted to communicate these to you guys, so that these can be fixed in future releases.