Hi, We released Hibernate Validator 6.1.5.Final and 6.0.20.Final. These versions fix CVE-2020-10693. If you develop custom constraint validators, the announcement is definitely a must-read: https://in.relation.to/2020/05/07/hibernate-validator-615-6020-released/ . Have a nice day! -- Guillaume