Log in Start free

JHipster

Products

ProductCVEsExploitedLatest
generator-jhipster3–Oct 8, 2026
generator-jhipster-entity-audit1–Apr 3, 2025
JHipster1–Jul 25, 2025
jhipster-kotlin1–Jun 25, 2020
react-jhipster1–Oct 8, 2026

Exploited and recent CVEs

  • CVE-2026-107375 High 8.8 JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort 0.4%
  • CVE-2026-107303 High 7.6 JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob 0.3%
  • CVE-2026-107303 High 7.6 JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob 0.3%
  • CVE-2025-43712 Low 2.9 JHipster before v.8.9.0 allows privilege escalation via a modified authorities parameter. Upon registering in the JHipster portal and logging in as a standard user, the authorities parameter in the re 0.3%
  • CVE-2025-31119 High 7.7 CWE-470 in generator-jhipster-entity-audit when having Javers selected as Entity Audit Framework 0.5%
  • CVE-2022-24815 High 8.1 SQL Injection when creating an application with Reactive SQL backend 1.4%
  • CVE-2020-4072 Medium 5.3 Log Forging in generator-jhipster-kotlin 1.2%