Jhipster vulnerabilities
We track 4 vulnerabilities in Jhipster products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 8, 2026.
Latest Jhipster vulnerabilities
- 8.8 High severity
generator-jhipster: Improper Neutralization of Special Elements used in an SQL Command
JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures. From 7.0.0 until 9.4.0, reactive applications generated with Spring WebFlux, Spring Data R2DBC, and a SQL database pass the atta
- 7.6 High severity
generator-jhipster: Improper Neutralization of Input During Web Page Generation
JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures. Prior to generator-jhipster 9.4.0 and react-jhipster 1.1.0, generated applications can persist attacker-controlled Blob data and
- 7.6 High severity
generator-jhipster-entity-audit: Use of Externally-Controlled Input to Select Classes or Code
generator-jhipster-entity-audit is a JHipster module to enable entity audit and audit log page. Prior to 5.9.1, generator-jhipster-entity-audit allows unsafe reflection when having Javers selected as Entity Audit Framework. If an attacker manages to place some
- 8.1 High severity
generator-jhipster: Improper Neutralization of Special Elements used in an SQL Command
JHipster is a development platform to quickly generate, develop, & deploy modern web applications & microservice architectures. SQL Injection vulnerability in entities for applications generated with the option "reactive with Spring WebFlux" enabled and an SQL