All products

generator-jhipster

npm · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) ApplicationssortCVE-2026-107375 · GHSA-R223-96JV-Q533 generator-jhipster npm High Fix reported
JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin BlobCVE-2026-107303 · GHSA-9FFP-22J7-56R2 generator-jhipsterreact-jhipster npm High Fix reported
generator-jhipster allows a timing attack against validateToken due to a string comparison that stops at the first characterCVE-2015-20110 · GHSA-4GPM-R23H-GPRW generator-jhipster npm High Fix reported
SQL Injection when creating an application with Reactive SQL backend CVE-2022-24815 · GHSA-QJMQ-8HJR-QCV6 generator-jhipster npm High Fix reported
generator-jhipster vulnerable to login check Regular Expression Denial of ServiceGHSA-8W7W-67MW-R5P7 generator-jhipster npm High No fix reported
High severity vulnerability that affects generator-jhipsterGHSA-MC84-XR9P-938R generator-jhipster npm High Fix reported