Release Notes / Version 10.2010
Table Of ContentsThird-Party Update: hibernate-validator
hibernate-validator
library has been updated to version 6.1.7-FINAL to avoid a security vulnerability of the previous used version 5.4.3-FINAL (CVE-2020-10693). The library is mainly used for URL validation in Studio Server but might also be used in project code. Unfortunately, there is no CVE-fix available for the previous 5.4.x release so that we had to upgrade to a newer major version which is considered a small breaking change.
Please review your custom code carefully and check if you are still compatible with this version update.
(CMS-19099)