GHSA-845h-985r-jrqh Improper Authentication in Hibernate Validator

• Maven org.hibernate:hibernate-validator: >= 4.1.0, < 4.2.1 → fixed in 4.2.1 • Maven org.hibernate:hibernate-validator: >= 4.3.0, < 4.3.2 → fixed in 4.3.2 • Maven org.hibernate:hibernate-validator: >= 5.0.0, < 5.1.2 → fixed in 5.1.2

ReflectionHelper (org.hibernate.validator.util.ReflectionHelper) in Hibernate Validator 4.1.0 before 4.2.1, 4.3.x before 4.3.2, and 5.x before 5.1.2 allows attackers to bypass Java Security Manager (JSM) restrictions and execute restricted reflection calls via a crafted application.