Hubspot

8 CVEs across 3 Hubspot products. Browse Hubspot vulnerabilities, severities, and proof-of-concept exploits.

Hubspot products with known CVEs

ProductCVEs
Jinjava4
Hubspot3
Hubl-Server1
Hubspot CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-57736High7.42026-07-01Insertion of Sensitive Information Into Sent Data vulnerability in HubSpot allows Retrieve Embedded Sensitive Data. This issue affects HubSpot: from n/a throu…
CVE-2026-25526Critical9.82026-02-04JinJava is a Java-based template engine based on django template syntax, adapted to render jinja templates. Prior to versions 2.7.6 and 2.8.3, JinJava is vulne…
CVE-2025-59340Critical9.82025-09-17jinjava is a Java-based template engine based on django template syntax, adapted to render jinja templates. Priori to 2.8.1, by using mapper.getTypeFactory().c…
CVE-2024-5879Medium6.42024-08-30The HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' attribute of t…
CVE-2022-1239High8.82022-05-02The HubSpot WordPress plugin before 8.8.15 does not validate the proxy URL given to the proxy REST endpoint, which could allow users with the edit_posts capabi…
CVE-2020-12668Medium6.52021-02-19Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context. This could allow for abuse of the appl…
CVE-2018-18893Medium5.32019-01-03Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java.
CVE-2017-16035High8.12018-06-04The hubl-server module is a wrapper for the HubL Development Server. During installation hubl-server downloads a set of dependencies from api.hubapi.com. It ap…