hutool-extra

Hutool 扩展工具类（提供其它类库的封装）

Latest 5.8.47cn.hutool

Maven

82%

Total Score

healthy

Healthy: regular releases and a stable, current major indicate active maintenance.

Are you affected? Scan for Free

Health Score Breakdown

Dependency profile

The package declares 44 runtime dependencies spanning many integrations, engines, and libraries. That breadth increases dependency upkeep and compatibility complexity even though it may reflect the package's broad extension scope.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-10920 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. hutool-extra is vulnerable to Remote Code Execution (RCE) in versions 0.0.1 - 5.8.45.	0.0.1 - 5.8.45	Critical
CVE-2025-56769 cn.hutool:hutool-extra is vulnerable to Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') in versions 0.0.0 - 5.8.40.	0.0.0 - 5.8.40	High

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
cn.hutool:hutool-core Version ${project.parent.version}	—	—
cn.hutool:hutool-setting Version ${project.parent.version}	—	—
org.apache.velocity:velocity-engine-core Version 2.3	—	—
com.ibeetl:beetl Version 3.15.14.RELEASE	—	—
org.rythmengine:rythm-engine Version 1.4.2	—	—