Should this vulnerability of GHSA-rmrm-75hp-phr2 include org.hibernate:hibernate-validator?

[zhangzhenyu2]

The groupId of the maven component corresponding to GHSA-rmrm-75hp-phr2 is org.hibernate.validator, but does it also include the groupId of org.hibernate?

For example:

• https://security.snyk.io/vuln/SNYK-JAVA-ORGHIBERNATE-568162

[JonathanLEvans]

Hi @zhangzhenyu2, thank you for your contribution. To suggest adding a new package, please use our improvement suggestion form. This will ensure a timely response and you get credit for the change.