NHibernate
NHibernate is a mature, open source object-relational mapper for the .NET framework. It is actively developed, fully featured and used in thousands of successful projects.
Activity
- Latest release
- 2mo ago
- Total releases
- 84
- Cadence
- ~27 days
- Last 12 months
- 4
Details
- License
- unknown
- First release
- Jan 07, 2011
Releases
| Version | Released | |
|---|---|---|
5.7.0
minor
|
5.7.0
minor
Dependencies (8)
|
|
5.6.1
patch
|
5.6.1
patch
Dependencies (8)
|
|
5.5.4
patch
|
5.5.4
patch
Dependencies (8)
|
|
5.6.0
minor
|
5.6.0
minor
Dependencies (8)
|
|
5.5.3
patch
|
5.5.3
patch
Dependencies (8)
|
|
5.4.10
patch
|
5.4.10
patch
Dependencies (8)
|
|
5.5.2
patch
|
5.5.2
patch
Dependencies (8)
|
|
5.4.9
patch
|
5.4.9
patch
Dependencies (8)
|
|
5.5.1
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.5.1
patch
Dependencies (8)
|
|
5.4.8
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.4.8
patch
Dependencies (8)
|
|
5.5.0
minor
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.5.0
minor
Dependencies (8)
|
|
5.4.7
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.4.7
patch
Dependencies (8)
|
|
5.3.20
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.3.20
patch
Dependencies (8)
|
|
5.4.6
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.4.6
patch
Dependencies (8)
|
|
5.4.5
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.4.5
patch
Dependencies (8)
|
|
5.3.19
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.3.19
patch
Dependencies (8)
|
|
5.4.4
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.4.4
patch
Dependencies (8)
|
|
5.4.3
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.4.3
patch
Dependencies (8)
|
|
5.3.18
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.3.18
patch
Dependencies (8)
|
|
5.3.17
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.3.17
patch
Dependencies (8)
|
|
5.4.2
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.4.2
patch
Dependencies (8)
|
|
5.3.16
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.3.16
patch
Dependencies (8)
|
|
5.4.1
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.4.1
patch
Dependencies (8)
|
|
5.3.15
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.3.15
patch
Dependencies (8)
|
|
5.4.0
minor
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.4.0
minor
Dependencies (8)
|
|
5.3.14
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.3.14
patch
Dependencies (8)
|
|
5.3.13
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.3.13
patch
Dependencies (8)
|
|
5.3.12
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.3.12
patch
Dependencies (8)
|
|
5.3.11
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.3.11
patch
Dependencies (8)
|
|
5.3.10
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.3.10
patch
Dependencies (8)
|
|
5.3.9
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.3.9
patch
Dependencies (8)
|
|
5.3.8
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.3.8
patch
Dependencies (8)
|
|
5.3.7
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.3.7
patch
Dependencies (8)
|
|
5.3.6
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.3.6
patch
Dependencies (8)
|
|
5.3.5
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.3.5
patch
Dependencies (8)
|
|
5.3.4
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.3.4
patch
Dependencies (8)
|
|
5.3.3
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.3.3
patch
Dependencies (8)
|
|
5.3.2
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.3.2
patch
Dependencies (8)
|
|
5.3.1
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.3.1
patch
Dependencies (8)
|
|
5.3.0
minor
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.3.0
minor
Dependencies (8)
|
|
5.1.7
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.1.7
patch
Dependencies (9)
+ 1 more |
|
5.2.7
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.2.7
patch
Dependencies (8)
|
|
5.0.8
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.0.8
patch
Dependencies (4)
|
|
5.1.6
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.1.6
patch
Dependencies (9)
+ 1 more |
|
5.2.6
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.2.6
patch
Dependencies (8)
|
|
5.2.5
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.2.5
patch
Dependencies (8)
|
|
5.1.5
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.1.5
patch
Dependencies (9)
+ 1 more |
|
5.0.7
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.0.7
patch
Dependencies (4)
|
|
5.2.4
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.2.4
patch
Dependencies (8)
|
|
5.2.3
patch
1 CVE
CVE-2024-39677
GHSA-fg4q-ccq8-3r5q
Jul 08, 2024
NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities
High
Network
High
None
None
ImpactA SQL injection vulnerability exists in some types implementing
PatchesReleases 5.4.9 and 5.5.2. Workarounds
References
Affected versions
2.1.2.4000
3.0.0.2001
3.0.0.3001
3.0.0.4000
3.1.0.4000
3.2.0.1001
3.2.0.1002
3.2.0.1003
3.2.0.2001
3.2.0.2002
3.2.0.3001
3.2.0.4000
+ 81 more Show less
3.3.0-CR1
3.3.0.4000
3.3.1.4000
3.3.2.4000
3.3.3-CR1
3.3.3.4000
3.3.3.4001
3.3.4.4000
3.3.5.4000
3.4.0-CR1
3.4.0.4000
3.4.1.4000
4.0.0-Alpha1
4.0.0-Alpha2
4.0.0-CR1
4.0.0.4000
4.0.1.4000
4.0.2.4000
4.0.3.4000
4.0.4.4000
4.1.0-CR1
4.1.0.4000
4.1.1.4000
4.1.2.4000
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.1.7
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.5.0
5.5.1
Fixed in
5.4.9
5.5.2
References
Updated Sep 10, 2026 · Source: OSV.dev |
5.2.3
patch
Dependencies (8)
|
1–50 of 84