jhipster vulnerabilities
6 published CVEs name jhipster among the affected products.
- Published CVEs
- 6
- Last 12 months
- 2
- Critical
- 0
- Known exploited
- 0
Critical 0High 4Medium 1Low 1Not scored 0
CVEs per yearBy the year they were published
- 20201
- 20221
- 20252
- 20262
Newest CVEs
- CVE-2026-107375
JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort
jhipster · generator-jhipster
High8.8 - CVE-2026-107303
JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob
jhipster · generator-jhipster
High7.6 - CVE-2025-43712
JHipster before v.8.9.0 allows privilege escalation via a modified authorities parameter. Upon registering in the JHipster portal and logging in as a standard…
JHipster · JHipster
Low2.9 - CVE-2025-31119
CWE-470 in generator-jhipster-entity-audit when having Javers selected as Entity Audit Framework
jhipster · generator-jhipster-entity-audit
High7.7 - CVE-2022-24815
SQL Injection when creating an application with Reactive SQL backend
jhipster · generator-jhipster
High8.1 - CVE-2020-4072
Log Forging in generator-jhipster-kotlin
jhipster · jhipster-kotlin
Medium5.3